02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff92250a9a9e32ee32b96eeea8f7e355275621f92c747a307a76f2602888a89578692479f1a096ac31a622bd58618c983aaac24e03290f3c16c71cadb31c55a574c25b049f366b4f5ce4d1a7634d557d8578963513407ef3523cc2b458cdfaa04b7510760614c4dc2802aa7fe11281d5c3e54881c5d06d13cbbeae1aca9170bfb6b3d09c375094213ea797c9bad45ae2195d491052893727394e398740a58f3df90a99200c35613a6970c22c649925ca1238dff3b56a204e20790f60573ba2d87cba5f57e826f1944de9d99115265e4a70b10100000000000000c002fdf8f316e16b03e826abb30c68022092e3cf470000"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:16 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="02000000000000060200e0000002000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000000000000000a88a8042677ba8af4584000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9a283de804d000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff92250a9a9e32ee32b96eeea8f7e355275621f92c747a307a76f2602888a89578692479f1a096ac31a622bd58618c983aaac24e03290f3c16c71cadb31c55a574c25b049f366b4f5ce4d1a7634d557d8578963513407ef3523cc2b458cdfaa04b7510760614c4dc2802aa7fe11281d5c3e54881c5d06d13cbbeae1aca9170bfb6b3d09c375094213ea797c9bad45ae2195d491052893727394e398740a58f3df90a99200c35613a6970c22c649925ca1238dff3b56a204e20790f60573ba2d87cba5f57e826f1944de9d99115265e4a70b10100000000000000c002fdf8f316e16b03e826abb30c68022092e3cf470000"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:17 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="02000000000000060200e0000002000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000000000000000a88a8042677ba8af4584000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9a283de804d000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff92250a9a9e32ee32b96eeea8f7e355275621f92c747a307a76f2602888a89578692479f1a096ac31a622bd58618c983aaac24e03290f3c16c71cadb31c55a574c25b049f366b4f5ce4d1a7634d557d8578963513407ef3523cc2b458cdfaa04b7510760614c4dc2802aa7fe11281d5c3e54881c5d06d13cbbeae1aca9170bfb6b3d09c375094213ea797c9bad45ae2195d491052893727394e398740a58f3df90a99200c35613a6970c22c649925ca1238dff3b56a204e20790f60573ba2d87cba5f57e826f1944de9d99115265e4a70b10100000000000000c002fdf8f316e16b03e826abb30c68022092e3cf470000"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:17 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="2c0072961db9e076edf9eff8741c66b4a60c86d32b759ba5f60b98159b73c9b80700000000000000c776924c3b33383e1984801278942b3ab50114a758615546ba0a25e3ebff4985c849dd95e4aa561ec7aeb90000000000000dccadd8d75aaff03a0700017e228b2d0149284b4bba49981af448a5201605dc13f315d0547b54553f1d4ff3375d3308a1771f1d2647b610693dc0aa6b8b3efb7aa661972247f31e1bc302000000bc848e9dc1b5e7a73831e00900e5a85a814d5c543a0e5c852d125c764c47fa09f7b76e721237c397bcb39d8c5bcd82bc855a996d9217ead5ee640377afeff0fffffffffffffbbf71d508afcdb0ee735b0e951b3f246a039466cd3865436c019f1c4afc6345f7b8", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:17 executing program 3:
r0 = memfd_create(&(0x7f0000000640)='\x00\xc76\xbe\x91\x8d\x182)!\r\xf0\xe0G\x16\xa1\xc6\xcb\x90\x8e.P\xaeK:\x9a+\b\x1d\xff\xe7\xe7K\xad\xb44|p,\x14\xcc%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f?\x00\x00\x00\xfa\xff\x00\x00%@T\xa2\xf9Q@\x14\xb6y\xe1\bK$\xdb\xe1?<\x00\x7f\xe4\x88\xce\x1eNc\xee\x89\xee\x8e\xee\x11\xee\f\xf5\xee-HP\x9b\xb3,\x8e\xc7.E&;\xdb\xb1j\xbb\xb9\xe9\x18~\xc8\x12\xaf\x86\xd9\xd7+ZvP\x83\x8d\xfcOe\x86:\x15;\xea\xb4\xa6\xaf\x8f\xccT\xf7\xe5\xc3\x02\t\xa8O\x19\xe3\x93\f\x9e\x12\x01\xb0<\xcf\xde\x1d\xc2\xa7t\xef\xe5\x83v \x1c\x9e\xe5\xa8g\x85\x15', 0xa)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x0, 0x3513fe})
fcntl$addseals(r0, 0x409, 0x6)
ioctl(r0, 0x40305828, &(0x7f0000000040))

04:53:18 executing program 3:
r0 = memfd_create(&(0x7f0000000640)='\x00\xc76\xbe\x91\x8d\x182)!\r\xf0\xe0G\x16\xa1\xc6\xcb\x90\x8e.P\xaeK:\x9a+\b\x1d\xff\xe7\xe7K\xad\xb44|p,\x14\xcc%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f?\x00\x00\x00\xfa\xff\x00\x00%@T\xa2\xf9Q@\x14\xb6y\xe1\bK$\xdb\xe1?<\x00\x7f\xe4\x88\xce\x1eNc\xee\x89\xee\x8e\xee\x11\xee\f\xf5\xee-HP\x9b\xb3,\x8e\xc7.E&;\xdb\xb1j\xbb\xb9\xe9\x18~\xc8\x12\xaf\x86\xd9\xd7+ZvP\x83\x8d\xfcOe\x86:\x15;\xea\xb4\xa6\xaf\x8f\xccT\xf7\xe5\xc3\x02\t\xa8O\x19\xe3\x93\f\x9e\x12\x01\xb0<\xcf\xde\x1d\xc2\xa7t\xef\xe5\x83v \x1c\x9e\xe5\xa8g\x85\x15', 0xa)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x0, 0x3513fe})
fcntl$addseals(r0, 0x409, 0x6)
ioctl(r0, 0x40305828, &(0x7f0000000040))

04:53:18 executing program 3:
r0 = memfd_create(&(0x7f0000000640)='\x00\xc76\xbe\x91\x8d\x182)!\r\xf0\xe0G\x16\xa1\xc6\xcb\x90\x8e.P\xaeK:\x9a+\b\x1d\xff\xe7\xe7K\xad\xb44|p,\x14\xcc%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f?\x00\x00\x00\xfa\xff\x00\x00%@T\xa2\xf9Q@\x14\xb6y\xe1\bK$\xdb\xe1?<\x00\x7f\xe4\x88\xce\x1eNc\xee\x89\xee\x8e\xee\x11\xee\f\xf5\xee-HP\x9b\xb3,\x8e\xc7.E&;\xdb\xb1j\xbb\xb9\xe9\x18~\xc8\x12\xaf\x86\xd9\xd7+ZvP\x83\x8d\xfcOe\x86:\x15;\xea\xb4\xa6\xaf\x8f\xccT\xf7\xe5\xc3\x02\t\xa8O\x19\xe3\x93\f\x9e\x12\x01\xb0<\xcf\xde\x1d\xc2\xa7t\xef\xe5\x83v \x1c\x9e\xe5\xa8g\x85\x15', 0xa)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x0, 0x3513fe})
fcntl$addseals(r0, 0x409, 0x6)
ioctl(r0, 0x40305828, &(0x7f0000000040))

04:53:18 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

04:53:18 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

[  328.371977][ T8506] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  328.426256][ T8506] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'.
04:53:19 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

[  329.766928][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.775938][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.184411][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.211417][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.588431][ T8506] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.601195][ T8506] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.612034][ T8506] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.625398][ T8506] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
04:53:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

04:53:21 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

04:53:21 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:21 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  330.981229][ T8532] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
04:53:21 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

[  331.034254][ T8532] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'.
04:53:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010d00)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

04:53:21 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x290)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108)
r2 = getpid()
r3 = getpid()
connect$inet(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e24, @loopback}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, r2)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000001980)="02101a30f44ed44601cb68fe56a6da31cefd09888697b7f95508e99ef1fc42db74c07c51e03da9624f2870071d6d8dd46635c690fb3251657c839a166bdc175a44d490c319cf4874cf9230e736a7a1eb6dfd0be0547cd2d50cc778d3790216360631864d1f5e10163d7e8336e86a9ad33e5b5bdeab6c1e0b810e46a2f0a32edef5590039a42baca732b2fa929387679dea8efbe1789f65775da2356fce957999981509065e449c758eeee8fc4d0771a69be74d21c62d34ec5a4af89f99e9196b5206772a99efd05393b96e50d9", 0xfffffff2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r6, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/170, 0xaa}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/204, 0xcc}], 0x6, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000018c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1}, 0x68, {0x2, 0x4e21, @remote}, 'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESOCT, @ANYBLOB="b3b3a349a7bdf5c916103ce90a67352c7c7a43e44837e7651762b265110968748991cce533aa22d29f632ca496e767568a5bb389ce1c71717ed0abd4f800966e8a53bb0851397051c316b60659f7ad10aa0a4edf697db860", @ANYRES16=r0], 0x2c}}, 0x600408c4)
waitid(0x2, 0x0, 0x0, 0x40000000, &(0x7f0000001ac0))
r8 = syz_clone(0x613a0880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$peeksig(0x10, r8, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2, 0x0, 0xffffffffffffff00, 0x1ff, r8})
recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)

04:53:21 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:21 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:21 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  331.359205][ T8539] netlink: 'syz-executor.2': attribute type 27 has an invalid length.
[  331.395489][ T8539] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'.
[  332.076308][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.085067][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.596439][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.630262][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.971348][ T8539] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.982681][ T8539] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.996891][ T8539] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.006349][ T8539] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.150901][ T8557] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  333.166868][ T8557] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'.
[  333.178390][ T8560] netlink: 'syz-executor.1': attribute type 27 has an invalid length.
04:53:23 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  333.204127][ T8560] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'.
04:53:23 executing program 4:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  333.775013][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.782837][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.202030][ T8560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.248018][ T8560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.528755][ T8560] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.538825][ T8560] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.550103][ T8560] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.559539][ T8560] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
04:53:25 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  334.658134][ T8563] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[  334.675130][ T8563] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'.
[  334.860884][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.870001][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.155992][ T8563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.173402][ T8563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.421480][ T8563] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.435121][ T8563] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.444970][ T8563] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.455598][ T8563] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
04:53:26 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:26 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  335.590426][ T8577] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  335.609032][ T8577] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'.
[  335.620861][ T8583] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
04:53:26 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  335.638115][ T8583] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'.
[  335.984148][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.992361][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.193102][ T8583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.220757][ T8583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.661534][ T8583] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.673704][ T8583] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.683214][ T8583] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.694159][ T8583] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
04:53:27 executing program 4:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  336.806608][ T8595] netlink: 'syz-executor.1': attribute type 27 has an invalid length.
[  336.821670][ T8595] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'.
[  336.840599][ T8607] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
04:53:27 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  336.856980][ T8607] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'.
[  336.888953][ T8609] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
04:53:27 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  336.901016][ T8609] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'.
[  336.914255][ T8611] netlink: 'syz-executor.2': attribute type 27 has an invalid length.
[  336.934167][ T8611] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'.
04:53:27 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  337.079242][ T8617] netlink: 'syz-executor.1': attribute type 27 has an invalid length.
[  337.102548][ T8617] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'.
[  337.115213][ T8618] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
04:53:27 executing program 4:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

[  337.123398][ T8618] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'.
[  337.149271][ T8621] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  337.165351][ T8621] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'.
04:53:27 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 4:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:27 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 4:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 4:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x90}}, 0x0)

04:53:28 executing program 3:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 2:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 1:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x90}}, 0x0)

04:53:28 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:28 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:28 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:29 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x90}}, 0x0)

04:53:29 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:29 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:29 executing program 0:
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001680)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09872d86e9fb8ab235b69c40865005b2cffb19881883111f2e424ce71bbf9739af462ae8e4da2a6202e00d49cbc880d31c941e2f1c6a8b13c38422432f6baf1dcdcfcc6b755f4774c5e0832a8e269b815ce42be896196729676a050dfa4493524341125def41496714a2e65f31e87e2e02df7189dcb96d149105f8f9b95705cdc34778c28c10a1b30f3237d63c01de9d0f", @ANYRESDEC=r0, @ANYBLOB="0c009900000000001f0000000c00580046000000002200000c00580026000000000c0058005a000000000000000c0058000b0000000c0058001400000000800000002200"], 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c854)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@remote}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "9c00", "c9350af0a43ede6d6800", "d0291b57", "cd3ede51856c927e"}, 0x28)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}], 0x300, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="5bbef06a1d4e583c0f11bb370faa03203783e86d8e87efbc6d6435f040d05fc751565780f302ee45082a1248974da80842aa9d5b5497d1dcfa7ef106961c476f983b9accc1fe79aa3cdff6866c9872b49a672a88648b66b2f6be7d05c93890fd09016967dc17555c6ebb35081c45a77f6dc275ade04abd10e71dc6de1666618ed5ac58198859bd38", 0x88, 0x44000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @mcast1, 0x1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="b6aa8c0570e83262ade788182e7e2207bb3c4e8e2836ccdaea2073996dc534bdfcd8a85f6bb4bcb66931b782f8e5745e89dc50c661f1a1fade03d3c9575a646abfe61ca6809b7cedd834a29712f3bb22ce8e60633ff610b75c10c1daff41114967", 0x61, 0x4000000, &(0x7f0000000780)={0xa, 0x4e24, 0xffff943e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20040022}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x1d8, 0x1d8, 0x0, 0x3b0, 0x1d8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000500), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @private0, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'veth0_to_hsr\x00', {}, {}, 0x87, 0xe0, 0x5, 0x48}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'wg0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x33, 0x0, 0x5}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x6, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'dvmrp1\x00', {0x80000000}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xff000000], 'veth1_to_bond\x00', 'bridge0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x2, 0x41}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1f, 0x80, 0x7f}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0xe9}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @common=@mh={{0x24}, {"9c6b"}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xb}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ec)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x17be1b})
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000001780)={0x124, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback}, @generic="ad5ff4bee123268c7eca507a11a6ed33decc4506848e39ef35032528f307155392d94a5a7480344e1ade3939fe734d2877e4ec2dbae72052a272c51cb3a01d54f310bc6718f95f07b44ad6f81497396c254eb87df4afe3e69e164b5d4a07944a1b1ebb4d9edd145e530225ea56f1610a5aa417f0588214869dc8103da28d450e6a36e03d6f723e5701d85c3668bbb1c02278d26b4c81d9e48f78b5c8a98245bfd46862caf353efb88e0ad5d57ede17523d8a28fa3e4626c5dc7ad51486823325624c3f7513c5cdb5f7c476fed6c7918e14960be245e704cc7a86a335b1191cf6aaed2052a4ab143c192cbd5c2e"]}, 0x124}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000003c0)=""/160, 0xa0, 0x40002022, &(0x7f0000000200)={0xa, 0x4e22, 0x10008, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @private2, 0x1f}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0x460c6}, 0x0, 0x0, 0x2}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="dbeb68b2ffcff7b81de1fc1b732201df8fe20d64a930dedb6d461de93a8c7c590cb8441ba9b36698c56e990a1a56", 0x2e, 0x4040004, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)

04:53:29 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x90}}, 0x0)

04:53:29 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:29 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:29 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:29 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:29 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:29 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:30 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:30 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:30 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:30 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:30 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:30 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:30 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:30 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:30 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:31 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:31 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:31 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:32 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:32 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:33 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:33 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:33 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:33 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:34 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:34 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:34 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:35 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:35 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:35 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:36 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:36 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:36 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x8000042}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002700)={&(0x7f0000001400), 0x10, 0x0}, 0x0)

04:53:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:36 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:36 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:36 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:37 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:37 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)

04:53:37 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

04:53:37 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

[  347.368525][ T8800] __nla_validate_parse: 28 callbacks suppressed
[  347.368538][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:53:38 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:38 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

04:53:38 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240))
getpgrp(0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
fcntl$notify(r2, 0x402, 0x80000000)
sendfile(r2, r3, 0x0, 0x8000fb00)

[  348.200445][ T8800] DRBG: could not allocate digest TFM handle: hmac(sha512)
04:53:38 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

[  348.489958][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:53:39 executing program 2:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:39 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

04:53:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

04:53:39 executing program 4:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

[  349.310552][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.317387][ T8839] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure
[  349.331169][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:53:39 executing program 4:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

04:53:39 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

[  349.356116][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
04:53:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

04:53:40 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:40 executing program 4:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

04:53:40 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

[  349.519308][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:53:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:40 executing program 4:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

04:53:40 executing program 2:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

[  349.776159][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.804193][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:53:40 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

04:53:40 executing program 4:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

[  349.824434][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.924140][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
04:53:40 executing program 3:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:40 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:40 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:40 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:41 executing program 0:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:41 executing program 2:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:41 executing program 4:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:41 executing program 3:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:41 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:41 executing program 0:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:42 executing program 2:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:42 executing program 4:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:42 executing program 3:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:42 executing program 1:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:42 executing program 0:
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xdcaa230f79a7a44c}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x3f00, 0x0)

04:53:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

[  352.457323][ T8901] __nla_validate_parse: 8 callbacks suppressed
[  352.457334][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  352.479076][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
04:53:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

[  352.586938][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  352.601362][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
04:53:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

[  352.694931][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  352.709310][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
04:53:43 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

04:53:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

[  352.860573][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  352.878159][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
04:53:43 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

[  352.963777][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  352.990440][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
04:53:43 executing program 2:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

04:53:43 executing program 1:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xe891]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xe33a}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34fd}}}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x88c}}, 0x0)

04:53:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3a33c0bbc6394d9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

04:53:43 executing program 3:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

04:53:43 executing program 2:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

04:53:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3a33c0bbc6394d9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

04:53:43 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x4}}, 0x80}}, 0x0)

04:53:43 executing program 4:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 1:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:44 executing program 2:
capset(&(0x7f0000008100)={0x20071026}, &(0x7f0000008140))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0})

04:53:44 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3a33c0bbc6394d9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

04:53:44 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x4}}, 0x80}}, 0x0)

04:53:44 executing program 4:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 2:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x4}}, 0x80}}, 0x0)

04:53:44 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3a33c0bbc6394d9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

04:53:44 executing program 1:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:44 executing program 4:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x4}}, 0x80}}, 0x0)

04:53:44 executing program 4:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 0:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:44 executing program 2:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 3:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:44 executing program 4:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:44 executing program 2:
semget$private(0x0, 0x0, 0x0)
sync()

04:53:44 executing program 1:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:44 executing program 2:
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @private}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0)

04:53:44 executing program 0:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:45 executing program 3:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:45 executing program 4:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:45 executing program 2:
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @private}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0)

04:53:45 executing program 1:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 2:
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @private}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0)

04:53:45 executing program 0:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:45 executing program 2:
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @private}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0)

04:53:45 executing program 3:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:45 executing program 1:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 4:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

04:53:45 executing program 2:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 1:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 2:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:45 executing program 1:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:45 executing program 4:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:45 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:45 executing program 2:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

04:53:45 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:46 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:46 executing program 4:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:46 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:46 executing program 2:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:46 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:46 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:46 executing program 4:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:46 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:46 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:46 executing program 2:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:46 executing program 4:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:46 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:46 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:46 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000240))

04:53:46 executing program 2:
r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

04:53:46 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:46 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @private}}, 0x24)

04:53:46 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000300), 0xa2, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

04:53:46 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

04:53:46 executing program 1:
r0 = syz_io_uring_setup(0x3326, &(0x7f0000000f40), &(0x7f0000000fc0), &(0x7f0000001000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x14, 0x0, 0x1)

04:53:46 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @private}}, 0x24)

04:53:46 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @private}}, 0x24)

04:53:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:46 executing program 1:
r0 = syz_io_uring_setup(0x3326, &(0x7f0000000f40), &(0x7f0000000fc0), &(0x7f0000001000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x14, 0x0, 0x1)

04:53:46 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

04:53:47 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @private}}, 0x24)

04:53:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

04:53:47 executing program 1:
r0 = syz_io_uring_setup(0x3326, &(0x7f0000000f40), &(0x7f0000000fc0), &(0x7f0000001000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x14, 0x0, 0x1)

04:53:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

04:53:47 executing program 1:
r0 = syz_io_uring_setup(0x3326, &(0x7f0000000f40), &(0x7f0000000fc0), &(0x7f0000001000))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x14, 0x0, 0x1)

04:53:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:47 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:47 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:47 executing program 2:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f25182e13cc7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0)

04:53:47 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:48 executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:48 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:48 executing program 2:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:48 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:49 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:49 executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:49 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:49 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:50 executing program 2:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:50 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:50 executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:50 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:51 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:51 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:51 executing program 2:
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0)

04:53:51 executing program 2:
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0)

04:53:51 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:51 executing program 2:
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0)

04:53:51 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:51 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:52 executing program 2:
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0)

04:53:52 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:52 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:52 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:52 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='+', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="b7", 0x1, 0x0, 0x0, 0x0)

04:53:52 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:52 executing program 1:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:53 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:53 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100))
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)

04:53:53 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:54 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:54 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:54 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:54 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:55 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:56 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:58 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:59 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:53:59 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:00 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:00 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:00 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:00 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:01 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:01 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:02 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:02 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:05 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:06 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:06 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:06 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:07 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:07 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:07 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:07 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:07 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:08 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:09 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

[  379.109217][ T1232] ieee802154 phy0 wpan0: encryption failed: -22
[  379.115789][ T1232] ieee802154 phy1 wpan1: encryption failed: -22
04:54:10 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:12 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:12 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:13 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:13 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:13 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:13 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:13 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:14 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:14 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:15 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:15 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:16 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:16 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:17 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:18 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:18 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:19 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:19 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:19 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:19 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="da378e71a7d0aae3f01d46634a9900000000790000a89ffb5b7f153f634b6808000000000000005332000000edffff62c577f7f74fb367eb7cfd0bff00000800000000f4095a00001000ee01000000000000920cefbe56d67b604714000000007c53c8049d281b669eed3cd42e7f650fdb012e97474a665d530a44d482b3bcd85c106abf789b3fe379fb04a9439c99294ec9e093a96f3ac718c3f8c1a5f284ebb77cecf6859d13f05d16a8614ebd3fb378778cc8df286b8d3c37ecb6da275ee228e3dab5f5195bce53b176b81251bf64ea321ad8996191504da6747c088840dc42cfdd032b0e33555a374a5ca6e7918b327ebbb92ca81ba8541e2147356a251b9bb46bbd0d3b29516ead254b541ba23f1b8c5c01b0c28fb19a11e9b9e5a44ef11f14ad27d9d4f3ea6bac244a8fc8c5cce115"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:19 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
timer_create(0x7, &(0x7f0000000680)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
unshare(0x22020000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)
unshare(0x40020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0)
pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc)
unshare(0x10200)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="6408712e43145c555b135db510f4dfc6c1431c39d0e8dbf4000000000006e044354a29f924945e09009fc5c7afe7ea7dba330fe9d9038ebb71eb4e2f224bfb9f7e32654dbae3e2d2acf87780e401e8d23c5a4277f4b6d2d01dc37dcf0cffc848687f56a17c99b3088815c153fa8539bb1ed849974b68fa870e39ffc2cd6311e7d99685303bcb8f90e8b0934985affbff8847ba0eaa"], 0x10)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x83)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000600)="b9e50200000f32c4c27d1c69e70f01d1de3e2e0fc478970f0000000500000500c00f3235004000000f30660f38807a8eb88000c0fe9d350000c0000f23f80fc75c1af3393d000000000fc77180", 0x4d}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000c00)={0x0, 0x0, @ioapic})
timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000540))

04:54:20 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:20 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:20 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:21 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:22 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

04:54:22 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:23 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:25 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:25 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:25 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:25 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

[  395.436414][ T9579] __nla_validate_parse: 2 callbacks suppressed
[  395.436426][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
04:54:26 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd509, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7f, 0x32315258})

[  395.488845][ T9579] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
04:54:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:26 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd509, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7f, 0x32315258})

[  395.799326][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
04:54:26 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd509, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7f, 0x32315258})

04:54:26 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:26 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:26 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd509, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7f, 0x32315258})

[  396.271973][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
04:54:26 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

[  396.578952][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:54:27 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

[  396.741014][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  396.754164][ T9600] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
04:54:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

[  397.027935][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
04:54:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:27 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

[  397.402457][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
04:54:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

[  397.585895][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
04:54:28 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:28 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:28 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:28 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:28 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000000c0)={0x0, 0x115, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}})

04:54:29 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:29 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:30 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:30 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:30 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:30 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:30 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ddb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x33c4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
lseek(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r5, 0x1)
recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0x2, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf250100000008000b0040000000050033000000000008003c0000000000060028000400000008003b000080000008000b0009000000050033000100000008002c000300000005003300000000009d563189e75fb33fa9aaeac8102388c980bbfc9141"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000c5646caa0855e82382a2f43770416763eb08ebc451ea5d008e2555e000eb055d61b3dcff793e3d73af23611a905935a37329042e517a502c92b76af2d2177b459dac4a4d6e833df553d45b1840a1a18f8100f156bda03a05b86b3c1862ec035a5ffd3261177cfec366e9b626822fe74e7b37ea8f0f9095191f35bc6a59fdc5102cc6a5ee06056481fa4545b143b58a69ae56113889005144d5092c039e3819b346041ad9064e1b7d3c391fb37a564177", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000002b00)=ANY=[@ANYBLOB="000061e00700000000000000cc", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25120000000800310009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f000000eb00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc19a895ad66aad71}, 0xc, &(0x7f000000eac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0400000078ab31a1378bcff94d02e285737f7ed6cddcaba735c37bdd14df4875c0c1db28594e7717edcd3b80dfb6388815e88bee73798fb965ade70ffd56fa8d44ed46fe8f4619793885b2414a967b0d3e4ec7f29e5d4e627b28653543167ef25ec188dec440c6081a5484986bb520329ef10ae7334fe4ecaa12abeab3", @ANYRES16=r9, @ANYBLOB="00082abd7000fbdbdf250100000005002f00010000000800310001010000050030000100000008003a00ff0100000500300001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28040040}, 0x20000910)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x400c000)

04:54:30 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:30 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x48, {0x2, 0x0, @remote}, 'wg0\x00'})

04:54:30 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:30 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:30 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:31 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x48, {0x2, 0x0, @remote}, 'wg0\x00'})

04:54:31 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x48, {0x2, 0x0, @remote}, 'wg0\x00'})

04:54:31 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x48, {0x2, 0x0, @remote}, 'wg0\x00'})

04:54:31 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:31 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:31 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:31 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:32 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:32 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:32 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:32 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:33 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:33 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:33 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:33 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:33 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:34 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:34 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:34 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:35 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:35 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:36 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:37 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:37 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:37 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:37 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:38 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:38 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:39 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:39 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:40 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:40 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:40 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:41 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:41 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:41 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:41 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:42 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:43 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:43 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:43 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "4081faf3b0d3b0e2"}, 0x13)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x81}, 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge0\x00'}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x800)

04:54:43 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:44 executing program 2:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:44 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:44 executing program 2:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:44 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:45 executing program 2:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:45 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:45 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:45 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:46 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:46 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:46 executing program 2:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:46 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:46 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:47 executing program 2:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:47 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:47 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:47 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:47 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:48 executing program 2:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:48 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:48 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:48 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:48 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:49 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:49 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=[{0x18, 0x84, 0x7, '\n'}], 0x18}, 0x41)

04:54:49 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:49 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:49 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=[{0x18, 0x84, 0x7, '\n'}], 0x18}, 0x41)

04:54:49 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:49 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=[{0x18, 0x84, 0x7, '\n'}], 0x18}, 0x41)

04:54:49 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

04:54:49 executing program 2:
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=[{0x18, 0x84, 0x7, '\n'}], 0x18}, 0x41)

04:54:49 executing program 0:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

[  419.424022][   T29] INFO: task kworker/0:1:9 blocked for more than 143 seconds.
[  419.431761][   T29]       Not tainted 6.8.0-rc2-syzkaller-00043-g2a6526c4f389 #0
04:54:50 executing program 3:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

[  419.469339][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  419.482516][   T29] task:kworker/0:1     state:D stack:25008 pid:9     tgid:9     ppid:2      flags:0x00004000
[  419.510831][   T29] Workqueue: usb_hub_wq hub_event
04:54:50 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  419.541534][   T29] Call Trace:
[  419.556502][   T29]  <TASK>
[  419.571998][   T29]  __schedule+0xf12/0x5c00
04:54:50 executing program 4:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

[  419.603226][   T29]  ? print_usage_bug.part.0+0x550/0x550
[  419.651190][   T29]  ? io_schedule_timeout+0x150/0x150
[  419.688265][   T29]  ? schedule+0x1fc/0x270
[  419.718869][   T29]  ? reacquire_held_locks+0x4c0/0x4c0
[  419.727738][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.763348][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[  419.789393][   T29]  schedule+0xe9/0x270
[  419.801911][   T29]  usb_kill_urb.part.0+0x1c6/0x250
[  419.811401][   T29]  ? usb_anchor_suspend_wakeups+0x40/0x40
[  419.829208][   T29]  ? prepare_to_swait_exclusive+0x240/0x240
04:54:50 executing program 1:
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f0000000300)=[0x0, <r2=>0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0x3})
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x52, 0x2, 0xb5})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={r7, r2, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x1000, 0xffff, 0x97c})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000900)={0x0, 0x4, 0x80000001, 0x4, 0x0, [], [0x0, 0x6, 0x4, 0x1], [0x5], [0x2000000, 0x525, 0x400]})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, 0x0)
syz_clone3(0x0, 0x0)
capset(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000880))

[  419.857420][   T29]  ? preempt_count_sub+0x160/0x160
[  419.865234][   T29]  usb_kill_urb+0x83/0xa0
[  419.877186][   T29]  usb_start_wait_urb+0x251/0x4c0
[  419.903241][   T29]  ? usb_api_blocking_completion+0xa0/0xa0
[  419.915403][   T29]  usb_control_msg+0x327/0x4a0
[  419.956093][   T29]  ? usb_start_wait_urb+0x4c0/0x4c0
[  419.988363][   T29]  ? hub_resume+0x3e0/0x3e0
04:54:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

[  420.035352][   T29]  get_bMaxPacketSize0.constprop.0+0xa5/0x1c0
[  420.088415][   T29]  hub_port_init+0x68c/0x39e0
04:54:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

[  420.253706][   T29]  hub_event+0x2b61/0x4e10
[  420.272114][   T29]  ? hub_port_debounce+0x3d0/0x3d0
04:54:50 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  420.311982][   T29]  ? print_irq_inversion_bug.part.0+0x391/0x590
[  420.343155][   T29]  ? lock_sync+0x190/0x190
04:54:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

[  420.357807][   T29]  ? reacquire_held_locks+0x4c0/0x4c0
[  420.377393][   T29]  process_one_work+0x886/0x15d0
[  420.398782][   T29]  ? hcd_died_work+0x60/0x60
[  420.411379][   T29]  ? workqueue_congested+0x300/0x300
[  420.430486][   T29]  ? assign_work+0x1a0/0x250
[  420.456738][   T29]  worker_thread+0x8b9/0x1290
[  420.485702][   T29]  ? __kthread_parkme+0x14b/0x220
[  420.490779][   T29]  ? process_one_work+0x15d0/0x15d0
[  420.552815][   T29]  kthread+0x2c6/0x3a0
[  420.564327][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  420.575734][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  420.588285][   T29]  ret_from_fork+0x45/0x80
[  420.600115][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  420.619052][   T29]  ret_from_fork_asm+0x11/0x20
[  420.639277][   T29]  </TASK>
[  420.642632][   T29] 
[  420.642632][   T29] Showing all locks held in the system:
04:54:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

[  420.655278][   T29] 5 locks held by kworker/0:1/9:
[  420.668153][   T29]  #0: ffff888015efb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0
[  420.689594][   T29]  #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0
04:54:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

[  420.733663][   T29]  #2: ffff888022926190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  420.772899][   T29]  #3: ffff888022a94510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10
04:54:51 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  420.843447][   T29]  #4: ffff8880229cfd28 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10
[  420.853448][   T29] 2 locks held by kworker/u4:1/12:
[  420.883665][   T29] 5 locks held by kworker/1:0/23:
[  420.899366][   T29]  #0: ffff888015efb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0
[  420.950668][   T29]  #1: ffffc900001d7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0
04:54:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

04:54:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

[  421.021569][   T29]  #2: ffff8880228d9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  421.074727][   T29]  #3: ffff8880228dc510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10
[  421.135888][   T29]  #4: ffff888022756d28 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10
04:54:51 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  421.188335][   T29] 1 lock held by khungtaskd/29:
[  421.193257][   T29]  #0: ffffffff8d1acbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[  421.349691][   T29] 2 locks held by getty/4815:
[  421.405928][   T29]  #0: ffff8880298260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
04:54:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xd0963b1f1d0053ad, 0x0, 0x0, {0x45}}, 0x14}}, 0x0)

04:54:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

[  421.454462][   T29]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490
[  421.486233][   T29] 5 locks held by kworker/0:3/5065:
[  421.491500][   T29]  #0: ffff888015efb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0
[  421.543669][   T29]  #1: ffffc90003c2fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0
[  421.593630][   T29]  #2: ffff888022aec190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  421.602601][   T29]  #3: ffff888022aef510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10
[  421.636447][   T29]  #4: ffff888022a214a8 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10
04:54:52 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

[  421.729983][   T29] 5 locks held by kworker/0:4/5075:
04:54:52 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  421.757823][   T29]  #0: ffff888015efb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0
[  421.799997][   T29]  #1: ffffc90003c8fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0
[  421.824985][   T29]  #2: ffff888022951190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  421.854646][   T29]  #3: ffff888022954510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10
[  421.900840][   T29]  #4: ffff8880223ecf48 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10
[  421.929318][   T29] 2 locks held by syz-executor.2/5433:
[  421.982229][   T29] 5 locks held by kworker/1:7/5507:
[  421.993906][   T29]  #0: ffff888015efb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0
04:54:52 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  422.025154][   T29]  #1: ffffc90004fcfd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0
[  422.058888][   T29]  #2: ffff888022828190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  422.082490][   T29]  #3: ffff88802282c510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10
[  422.115740][   T29]  #4: ffff88802191d9f8 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10
[  422.145162][   T29] 3 locks held by syz-executor.2/9973:
[  422.161983][   T29] 2 locks held by syz-executor.2/9992:
[  422.177733][   T29] 3 locks held by syz-executor.1/10001:
[  422.200424][   T29] 2 locks held by syz-executor.3/10011:
[  422.233763][   T29] 3 locks held by syz-executor.0/10015:
[  422.239518][   T29] 2 locks held by syz-executor.3/10020:
[  422.251775][   T29] 2 locks held by syz-executor.3/10021:
[  422.271669][   T29]  #0: ffff88802d9a4da0 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x203/0xb50
[  422.299195][   T29]  #1: ffff888027bc6a38 (&anon_vma->rwsem){++++}-{3:3}, at: unlink_anon_vmas+0x201/0x800
[  422.330840][   T29] 1 lock held by syz-executor.2/10025:
[  422.345389][   T29] 3 locks held by syz-executor.2/10026:
04:54:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x0, &(0x7f00000003c0)="510d6f1d12d8e1d64d60695882609d268b7da1dfb8ac7b", 0x17, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="b9d969a53f9d52fdc83ca09e9b4c60a5e87d264e1dee7b7ca42897cefabead42ab9f85d47aac8971968f1e6d4828a5fe64e8b3629808f1707fcb3d222b0bbbdb563f71208b4bfe4b6954fca345cc915e070b93730c7fc395beb99d53595d6c78cf4f66c56349f8b69d1c54e475b907b87e389455580dcae7d855e5824e07fe26140490ca9c26a46cc1f281cf96ac621282dab38c7ee624f77f")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x99, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  422.367161][   T29] 
[  422.378018][   T29] =============================================
[  422.378018][   T29] 
[  422.424622][   T29] NMI backtrace for cpu 1
[  422.428964][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc2-syzkaller-00043-g2a6526c4f389 #0
[  422.438750][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[  422.448791][   T29] Call Trace:
[  422.452054][   T29]  <TASK>
[  422.454971][   T29]  dump_stack_lvl+0xd9/0x1b0
[  422.459631][   T29]  nmi_cpu_backtrace+0x277/0x390
[  422.464563][   T29]  ? lapic_can_unplug_cpu+0xa0/0xa0
[  422.469752][   T29]  nmi_trigger_cpumask_backtrace+0x299/0x300
[  422.475738][   T29]  watchdog+0xf87/0x1210
[  422.480011][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  422.485985][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[  422.491172][   T29]  ? __kthread_parkme+0x14b/0x220
[  422.496185][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  422.502159][   T29]  kthread+0x2c6/0x3a0
[  422.506219][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  422.511408][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  422.517031][   T29]  ret_from_fork+0x45/0x80
[  422.521437][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  422.527065][   T29]  ret_from_fork_asm+0x11/0x20
[  422.531830][   T29]  </TASK>
[  422.534921][    C1] vkms_vblank_simulate: vblank timer overrun
[  422.541200][   T29] Sending NMI from CPU 1 to CPUs 0:
[  422.546440][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1b/0x20
[  422.695349][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  422.702236][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc2-syzkaller-00043-g2a6526c4f389 #0
[  422.712071][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[  422.722141][   T29] Call Trace:
[  422.725433][   T29]  <TASK>
[  422.728381][   T29]  dump_stack_lvl+0xd9/0x1b0
[  422.733000][   T29]  panic+0x6dc/0x790
[  422.736923][   T29]  ? panic_smp_self_stop+0xa0/0xa0
[  422.742064][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  422.747439][   T29]  ? lapic_can_unplug_cpu+0xa0/0xa0
[  422.752637][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  422.758015][   T29]  ? watchdog+0xd3e/0x1210
[  422.762468][   T29]  ? watchdog+0xd31/0x1210
[  422.766904][   T29]  watchdog+0xd4f/0x1210
[  422.771161][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  422.777151][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[  422.782360][   T29]  ? __kthread_parkme+0x14b/0x220
[  422.787397][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  422.793392][   T29]  kthread+0x2c6/0x3a0
[  422.797487][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  422.802715][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  422.808360][   T29]  ret_from_fork+0x45/0x80
[  422.812788][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  422.818433][   T29]  ret_from_fork_asm+0x11/0x20
[  422.823223][   T29]  </TASK>
[  422.826417][   T29] Kernel Offset: disabled
[  422.830739][   T29] Rebooting in 86400 seconds..