00000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x65580000}, 0x0)

[  754.744495][ T1414] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:23 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x68000000}, 0x0)

[  754.790865][ T1417] PF_BRIDGE: br_mdb_parse() with invalid attr
[  754.799935][ T1421] PF_BRIDGE: br_mdb_parse() with invalid attr
[  754.809465][ T1418] kernel msg: ebtables bug: please report to author: bad policy
13:23:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x60000000)

[  754.915583][ T1434] __nla_parse: 34 callbacks suppressed
[  754.915590][ T1434] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  754.950876][ T1434] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0)

[  754.964455][ T1435] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  754.993264][ T1435] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.022653][ T1437] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  755.060240][ T1437] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.074587][ T1445] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  755.084720][ T1441] kernel msg: ebtables bug: please report to author: bad policy
[  755.089130][ T1445] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.111216][ T1448] kernel msg: ebtables bug: please report to author: bad policy
[  755.126769][ T1445] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  755.136361][ T1445] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
close(0xffffffffffffffff)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:23 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

[  755.221563][ T1457] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  755.249582][ T1457] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.255740][ T1459] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  755.267635][ T1459] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x68000000)

[  755.296445][ T1462] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  755.336327][ T1462] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  755.343200][ T1470] kernel msg: ebtables bug: please report to author: bad policy
[  755.386223][    C0] net_ratelimit: 16 callbacks suppressed
[  755.386239][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  755.397646][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  755.403408][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  755.409167][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  755.414935][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  755.420711][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:23:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

[  755.440210][ T1473] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  755.466281][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  755.472087][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  755.481681][ T1473] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6c000000)

13:23:23 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  755.508842][ T1478] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  755.523679][ T1478] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.536562][ T1483] kernel msg: ebtables bug: please report to author: bad policy
13:23:23 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x10003, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  755.611024][ T1494] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x81000000}, 0x0)

13:23:23 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  755.661415][ T1495] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.691093][ T1501] kernel msg: ebtables bug: please report to author: bad policy
[  755.697636][ T1503] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0)

[  755.774736][ T1513] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.788999][ T1514] kernel msg: ebtables bug: please report to author: bad policy
[  755.802687][ T1515] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:24 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x74000000)

[  755.874677][ T1525] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:24 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  755.955429][ T1530] PF_BRIDGE: br_mdb_parse() with invalid attr
[  755.982092][ T1532] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

13:23:24 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  756.052620][ T1538] kernel msg: ebtables bug: please report to author: bad policy
[  756.062780][ T1541] PF_BRIDGE: br_mdb_parse() with invalid attr
[  756.078125][ T1543] kernel msg: ebtables bug: please report to author: bad policy
13:23:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  756.106238][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  756.112029][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  756.130774][ T1548] device nr0
 entered promiscuous mode
13:23:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  756.162957][ T1552] PF_BRIDGE: br_mdb_parse() with invalid attr
[  756.171445][ T1556] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a000000)

13:23:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xad030000}, 0x0)

13:23:24 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xceffffff)

[  756.349474][ T1586] kernel msg: ebtables bug: please report to author: bad policy
13:23:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe8030000)

13:23:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

[  756.562904][ T1579] PF_BRIDGE: br_mdb_parse() with invalid attr
[  756.574286][ T1580] PF_BRIDGE: br_mdb_parse() with invalid attr
[  756.580979][ T1583] PF_BRIDGE: br_mdb_parse() with invalid attr
[  756.592096][ T1596] kernel msg: ebtables bug: please report to author: bad policy
13:23:24 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000440)={"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"})

13:23:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:24 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  756.707599][ T1608] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xfee00000)

[  756.758346][ T1606] PF_BRIDGE: br_mdb_parse() with invalid attr
[  756.777149][ T1611] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xffffa888}, 0x0)

13:23:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  756.817309][ T1615] kernel msg: ebtables bug: please report to author: bad policy
13:23:25 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  756.884757][ T1624] device nr0
 entered promiscuous mode
[  756.892527][ T1625] kernel msg: ebtables bug: please report to author: bad policy
[  756.919700][ T1627] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffff0000)

13:23:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  756.955385][ T1628] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

[  757.128808][ T1651] kernel msg: ebtables bug: please report to author: bad policy
13:23:25 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10800, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)={0x1ff, {{0x2, 0x4e21, @loopback}}, 0x0, 0x4, [{{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x290)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x280, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10cd7945610c671b06f2783724da230b96ecd0e61371b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb8ff6d0a7064759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591"], 0xd3)

13:23:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffff8000)

13:23:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:25 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  757.277937][ T1634] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.284366][ T1642] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.301380][ T1648] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

[  757.383140][ T1661] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.410981][ T1666] kernel msg: ebtables bug: please report to author: bad policy
[  757.427081][ T1664] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

[  757.442491][ T1672] kernel msg: ebtables bug: please report to author: bad policy
[  757.469571][ T1674] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  757.546670][ T1683] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.585088][ T1685] kernel msg: ebtables bug: please report to author: bad policy
13:23:25 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd3)

[  757.595636][ T1687] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.615177][ T1692] kernel msg: ebtables bug: please report to author: bad policy
13:23:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  757.644987][ T1695] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffce)

13:23:25 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

13:23:26 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  757.745708][ T1704] device nr0
 entered promiscuous mode
13:23:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  757.810898][ T1705] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.823317][ T1711] PF_BRIDGE: br_mdb_parse() with invalid attr
[  757.846797][ T1712] kernel msg: ebtables bug: please report to author: bad policy
13:23:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x40030000000000}, 0x0)

[  757.944802][ T1722] kernel msg: ebtables bug: please report to author: bad policy
13:23:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8000000000)

13:23:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7f8db9015700)

[  758.319112][ T1714] PF_BRIDGE: br_mdb_parse() with invalid attr
[  758.329131][ T1723] PF_BRIDGE: br_mdb_parse() with invalid attr
[  758.335284][ T1726] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:26 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:26 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c1b05cd1f783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5efe6ccd1cffeb49677ed15cc347ce61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e8086030b458687c15ab221252a922890400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44eddfd428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a28e8eeaf38d6c2dde53bf4efde98c3f70ff0951ed24ea57a90b350dee3cd378e6023984c1c1d5304fe87c5eb0b7825715e1ad19b57639da9a08e2e0ddc55747c601e2b4ca6d2823f58b8537f63b93f381b9bd1edfec86c1e669fdeb9bdce"], 0xd3)

13:23:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0)

13:23:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe0fe00000000)

[  758.497455][ T1744] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x100000000000000}, 0x0)

[  758.567366][ T1748] kernel msg: ebtables bug: please report to author: bad policy
[  758.575699][ T1753] PF_BRIDGE: br_mdb_parse() with invalid attr
[  758.607457][ T1758] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:26 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  758.648808][ T1760] kernel msg: ebtables bug: please report to author: bad policy
[  758.664681][ T1762] device nr0
 entered promiscuous mode
[  758.681672][ T1763] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x200000000000000}, 0x0)

13:23:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000)

[  758.949848][ T1783] kernel msg: ebtables bug: please report to author: bad policy
13:23:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5701b98d7f0000)

13:23:27 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  759.137933][ T1771] PF_BRIDGE: br_mdb_parse() with invalid attr
[  759.144241][ T1775] PF_BRIDGE: br_mdb_parse() with invalid attr
[  759.156421][ T1779] PF_BRIDGE: br_mdb_parse() with invalid attr
[  759.163818][ T1792] kernel msg: ebtables bug: please report to author: bad policy
[  759.178595][ T1775] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 5:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0xf006)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_dccp_buf(r0, 0x21, 0x5535749b8c4089ab, &(0x7f0000000440)=""/159, &(0x7f0000000080)=0x9f)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x300000000000000}, 0x0)

[  759.196409][ T1779] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000)

[  759.307609][ T1800] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  759.380923][ T1807] PF_BRIDGE: br_mdb_parse() with invalid attr
[  759.405139][ T1810] kernel msg: ebtables bug: please report to author: bad policy
[  759.413153][ T1813] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x400000000000000}, 0x0)

[  759.443456][ T1820] kernel msg: ebtables bug: please report to author: bad policy
[  759.454710][ T1803] device nr0
 entered promiscuous mode
[  759.475216][ T1822] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xee0f0000000000)

[  759.513657][ T1813] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:27 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  759.689633][ T1840] kernel msg: ebtables bug: please report to author: bad policy
13:23:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000)

[  759.885286][ T1827] PF_BRIDGE: br_mdb_parse() with invalid attr
[  759.910490][ T1838] PF_BRIDGE: br_mdb_parse() with invalid attr
[  759.920456][ T1850] kernel msg: ebtables bug: please report to author: bad policy
[  759.930318][ T1839] __nla_parse: 49 callbacks suppressed
[  759.930325][ T1839] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  759.937689][ T1839] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x500000000000000}, 0x0)

13:23:28 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x401, 0x0)
ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x7, 0x7, 0x26, 0x101, 0x18, 0x52, 0x0, 0x9, 0x3, 0x9})
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000)

13:23:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  760.114715][ T1865] kernel msg: ebtables bug: please report to author: bad policy
[  760.118595][ T1870] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  760.140573][ T1870] PF_BRIDGE: br_mdb_parse() with invalid attr
[  760.148535][ T1872] kernel msg: ebtables bug: please report to author: bad policy
13:23:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x600000000000000}, 0x0)

[  760.158912][ T1866] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  760.183227][ T1866] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  760.226406][ T1862] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  760.254415][ T1862] PF_BRIDGE: br_mdb_parse() with invalid attr
[  760.266696][ T1868] device nr0
 entered promiscuous mode
[  760.288597][ T1880] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  760.289199][ T1881] kernel msg: ebtables bug: please report to author: bad policy
13:23:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)

[  760.337357][ T1880] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x700000000000000}, 0x0)

[  760.377720][ T1892] kernel msg: ebtables bug: please report to author: bad policy
[  760.506288][    C1] net_ratelimit: 24 callbacks suppressed
[  760.506296][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  760.512014][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000)

[  760.711439][ T1890] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  760.722598][ T1890] PF_BRIDGE: br_mdb_parse() with invalid attr
[  760.733291][ T1898] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  760.765365][ T1898] PF_BRIDGE: br_mdb_parse() with invalid attr
[  760.796842][ T1900] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:23:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x8000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0x9, 0x0, 0x681})
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x1c, 0x400000000000109}, 0x14}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180))
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000840)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xcd\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf8\xab%m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xf9J\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\xcf\xba\xdb\xc4<\xcd\x81q\x83e\xe0F\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x16(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\x00\x00\x00\x00\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x90\x0eI\xab\x19\f\xc8\aU\xa9:\x13\xb8\xe5\x91\xe4&\xbd\xede\xd8,L\xa2z\xe6p\x82\xe4.u\xf9[&\xfb\x1f\xe1~\x88\xa0\xf5>\xfa\xf1.\xcb\xd2\x812lD8\xf5s\xe0\xa5\x85-\f8rJ\x1d\x96z0\xea=\x1b\r3\x03\xfc\xfb\xa1\xf7')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000)

[  760.820589][ T1900] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x800000000000000}, 0x0)

[  760.913119][ T1915] kernel msg: ebtables bug: please report to author: bad policy
[  760.930461][ T1919] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  760.952419][ T1924] kernel msg: ebtables bug: please report to author: bad policy
13:23:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  760.961141][ T1919] PF_BRIDGE: br_mdb_parse() with invalid attr
[  760.967717][ T1921] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  760.977817][ T1921] PF_BRIDGE: br_mdb_parse() with invalid attr
[  760.994094][ T1929] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0)

[  761.073663][ T1928] device nr0
 entered promiscuous mode
[  761.093210][ T1937] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  761.156577][ T1943] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.189361][ T1944] kernel msg: ebtables bug: please report to author: bad policy
13:23:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000)

13:23:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xc00000000000000}, 0x0)

13:23:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  761.394851][ T1945] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.401105][ T1952] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.407360][ T1954] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.417102][ T1952] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.515793][ T1966] kernel msg: ebtables bug: please report to author: bad policy
[  761.524760][ T1969] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.546724][ T1971] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  761.565655][ T1970] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.605612][ T1975] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xe00000000000000}, 0x0)

[  761.626257][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  761.632037][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  761.637843][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  761.643581][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  761.649384][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  761.655160][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  761.662637][ T1964] device nr0
 entered promiscuous mode
13:23:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  761.700658][ T1982] kernel msg: ebtables bug: please report to author: bad policy
[  761.706262][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  761.714116][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000)

13:23:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0)

13:23:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  761.747437][ T1988] PF_BRIDGE: br_mdb_parse() with invalid attr
[  761.755139][ T1987] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  761.898871][ T2003] kernel msg: ebtables bug: please report to author: bad policy
[  762.109531][ T1999] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.115770][ T2002] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.123796][ T2009] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.137177][ T2002] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:30 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000440)="6f8fbf9e586365ba00ad697de756cd1b57282eb511bb8ccb5a52ca0caf63400e9d4adc27c63bb9f79128")
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$vfat(&(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000600)=[{&(0x7f0000000500)="c3d69b3cad34daed0c8fc7dc0808b76c65c9134314dc377e2416e0952b2ffaa4cf72e021fe8c5bf8b0c7481881b981113ba20d3c46747ca1238693c499d7d3276641e46698ecafbd13ddf0adf3c2b85ac2deb26a7ee6973f2a6d6816cb6211aefecfeca5a524678b2f23fa5c403e5d0c0770f43ce066022f318438", 0x7b, 0x4}, {&(0x7f0000000580)="607ca3cf3e09927bcf28f65e73e483b4722d7f0465e0b6da51971ba0cdf52f46851e383a7534a74ace9f6f304c07053a0a390ba80705c7e015a4cd56bcca82135cd9df2d725e042f", 0x48}], 0x1000, &(0x7f00000006c0)={[{@rodir='rodir'}], [{@subj_type={'subj_type', 0x3d, 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsname={'fsname', 0x3d, 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}}]})
r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
socket$kcm(0x29, 0x5, 0x0)
recvfrom$ax25(r1, &(0x7f0000000040)=""/97, 0x61, 0x40000000, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000)

13:23:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0)

[  762.268765][ T2021] kernel msg: ebtables bug: please report to author: bad policy
[  762.305168][ T2026] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  762.321212][ T2029] kernel msg: ebtables bug: please report to author: bad policy
13:23:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  762.373138][ T2032] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.435420][ T2040] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x2000000000000000}, 0x0)

13:23:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000)

[  762.572032][ T2052] kernel msg: ebtables bug: please report to author: bad policy
[  762.580338][ T2051] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.619074][ T2056] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.653641][ T2059] PF_BRIDGE: br_mdb_parse() with invalid attr
[  762.671815][ T2063] kernel msg: ebtables bug: please report to author: bad policy
[  762.691176][ T2059] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  762.742262][ T2056] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x3f00000000000000}, 0x0)

13:23:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  762.792359][ T2069] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:31 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  762.896771][ T2077] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000)

13:23:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x4000000000000000}, 0x0)

[  762.987130][ T2083] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.013589][ T2088] kernel msg: ebtables bug: please report to author: bad policy
13:23:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
keyctl$set_reqkey_keyring(0xe, 0x5)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  763.047651][ T2091] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.073263][ T2097] kernel msg: ebtables bug: please report to author: bad policy
13:23:31 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  763.217050][ T2107] device nr0
 entered promiscuous mode
[  763.239970][ T2106] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.251498][ T2109] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000)

[  763.378118][ T2120] kernel msg: ebtables bug: please report to author: bad policy
13:23:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000)

13:23:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x4800000000000000}, 0x0)

[  763.719495][ T2106] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.727033][ T2117] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.740011][ T2126] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.747449][ T2117] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:32 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x400480)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000440)=""/217)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  763.855838][ T2141] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.892931][ T2141] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000)

[  763.905106][ T2137] kernel msg: ebtables bug: please report to author: bad policy
[  763.925485][ T2145] PF_BRIDGE: br_mdb_parse() with invalid attr
[  763.940095][ T2149] kernel msg: ebtables bug: please report to author: bad policy
13:23:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x4c00000000000000}, 0x0)

13:23:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  764.062695][ T2159] PF_BRIDGE: br_mdb_parse() with invalid attr
[  764.084277][ T2161] device nr0
 entered promiscuous mode
[  764.127403][ T2158] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x6000000000000000}, 0x0)

13:23:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000)

[  764.269955][ T2175] kernel msg: ebtables bug: please report to author: bad policy
13:23:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000)

13:23:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  764.594637][ T2166] PF_BRIDGE: br_mdb_parse() with invalid attr
[  764.608511][ T2174] PF_BRIDGE: br_mdb_parse() with invalid attr
[  764.615793][ T2175] kernel msg: ebtables bug: please report to author: bad policy
[  764.624965][ T2178] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:32 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
fcntl$notify(r1, 0x402, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000040)=""/105)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, 0x4)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4aeb3b145e1f3f3ee8fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x6558000000000000}, 0x0)

[  764.764762][ T2196] PF_BRIDGE: br_mdb_parse() with invalid attr
[  764.779814][ T2194] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  764.809044][ T2199] kernel msg: ebtables bug: please report to author: bad policy
[  764.831675][ T2204] kernel msg: ebtables bug: please report to author: bad policy
13:23:33 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  764.856037][ T2208] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  764.926982][ T2213] device nr0
 entered promiscuous mode
[  764.960848][ T2214] __nla_parse: 46 callbacks suppressed
[  764.960857][ T2214] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000)

13:23:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x6800000000000000}, 0x0)

[  764.982601][ T2214] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  765.111199][ T2228] kernel msg: ebtables bug: please report to author: bad policy
13:23:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000)

13:23:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000)

[  765.510898][ T2215] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  765.531990][ T2215] PF_BRIDGE: br_mdb_parse() with invalid attr
[  765.541378][ T2224] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  765.546945][ T2228] kernel msg: ebtables bug: please report to author: bad policy
13:23:33 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  765.573361][ T2224] PF_BRIDGE: br_mdb_parse() with invalid attr
[  765.611474][ T2230] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  765.630947][ T2230] PF_BRIDGE: br_mdb_parse() with invalid attr
[  765.748801][ T2251] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  765.786290][    C0] net_ratelimit: 16 callbacks suppressed
[  765.786298][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:34 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'nlmon0\x00', 0x200})
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x6c00000000000000}, 0x0)

13:23:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000)

[  765.797784][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  765.803628][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  765.809453][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  765.815317][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  765.821159][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  765.843100][ T2251] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  765.854075][ T2256] kernel msg: ebtables bug: please report to author: bad policy
[  765.866299][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  765.872147][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  765.884708][ T2261] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:34 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  765.901552][ T2261] PF_BRIDGE: br_mdb_parse() with invalid attr
[  765.916807][ T2260] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:23:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  765.967901][ T2260] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x7400000000000000}, 0x0)

[  766.031173][ T2267] device nr0
 entered promiscuous mode
[  766.054900][ T2274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  766.102418][ T2274] PF_BRIDGE: br_mdb_parse() with invalid attr
[  766.115443][ T2278] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  766.140684][ T2278] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  766.148294][ T2284] kernel msg: ebtables bug: please report to author: bad policy
[  766.157051][ T2281] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  766.178833][ T2281] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000)

13:23:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x7a00000000000000}, 0x0)

[  766.506287][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  766.512121][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  766.569420][ T2274] PF_BRIDGE: br_mdb_parse() with invalid attr
[  766.575978][ T2293] PF_BRIDGE: br_mdb_parse() with invalid attr
[  766.585541][ T2295] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:34 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0xa942)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
r4 = socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}, {0x20, 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}, {}, {0x20, ' em1}'}, {}, {0x20, 'selinuxcpuset'}, {0x20, 'nr0\x01\x00'}, {}], 0xa, "f486914cefee565f18924be281b6bbbbe828c71d2b7588456d4dd1a39c0cebe6980a0f43fc79f23f98966f35fb9b94b4bdac7bb19e6eafe9bf4f413b616e1bd91d6b3536f78efc48bdfe93e4c30565e5ad6844d07d7cf4575052cc3177ef8ee5965bcf049f771abad4f010e80509a1485bfb51a249837f81ff0b2d5b9ad80a9d26"}, 0x3f5)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000840)=<r5=>0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x5, 0x3f, 0x4, 0x1ff, 0x0, 0xfffffffffffffffc, 0x800, 0xc, 0x1ff, 0x7fff, 0x3, 0x100000000, 0x1, 0x4, 0x7, 0xa28a, 0x5, 0x400, 0x0, 0x8, 0x1082, 0x1e, 0x9, 0x9f, 0x4, 0x7ff, 0x6, 0x8, 0x7, 0x5, 0x6dc, 0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x80000001, 0x1, @perf_config_ext={0x3, 0x3}, 0x10, 0x8, 0x7, 0x2, 0xffffffffffffffff, 0x1, 0xc9b0}, r5, 0x2, r3, 0x2)
write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e808d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a00000000000000"], 0xd3)

13:23:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000)

13:23:34 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x8100000000000000}, 0x0)

13:23:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  766.767395][ T2310] kernel msg: ebtables bug: please report to author: bad policy
[  766.784649][ T2313] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  766.816969][ T2316] PF_BRIDGE: br_mdb_parse() with invalid attr
[  766.830086][ T2309] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)

13:23:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96d4ead7a48ad755106b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5c6b4b4134cf3233591e813e54a"], 0xd3)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
r3 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000480)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r3}}, 0x18)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000))

[  766.985919][ T2334] PF_BRIDGE: br_mdb_parse() with invalid attr
[  766.992433][ T2329] kernel msg: ebtables bug: please report to author: bad policy
[  767.008778][ T2335] PF_BRIDGE: br_mdb_parse() with invalid attr
[  767.033405][ T2336] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0)

13:23:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000)

13:23:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  767.203428][ T2351] device nr0
 entered promiscuous mode
[  767.221182][ T2346] PF_BRIDGE: br_mdb_parse() with invalid attr
[  767.244434][ T2352] PF_BRIDGE: br_mdb_parse() with invalid attr
[  767.283694][ T2355] kernel msg: ebtables bug: please report to author: bad policy
13:23:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  767.291563][ T2356] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xad03000000000000}, 0x0)

13:23:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000)

13:23:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000)

[  767.729158][ T2370] PF_BRIDGE: br_mdb_parse() with invalid attr
[  767.735380][ T2373] PF_BRIDGE: br_mdb_parse() with invalid attr
[  767.742149][ T2377] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x111800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00ff0d6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153626076c42e00d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fb75732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d0500648cccbbf927f18329c9b9765b7c46287cc06707df75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c6726000f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a000000000000"], 0xd3)

13:23:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0)

[  767.828244][ T2394] kernel msg: ebtables bug: please report to author: bad policy
[  767.839569][ T2392] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000)

13:23:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  767.889880][ T2399] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  767.946318][ T2404] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0)

13:23:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  768.015294][ T2422] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 5:
clock_getres(0x5, &(0x7f0000000480))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r4 = socket$l2tp(0x18, 0x1, 0x1)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {}, {0x87ae}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in, 0x0, 0x2}, 0x0, @in6=@mcast2}}, 0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$ax25(0x3, 0x0, 0xcc)
sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xd3)

13:23:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000)

13:23:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  768.114212][ T2428] PF_BRIDGE: br_mdb_parse() with invalid attr
[  768.140987][ T2430] kernel msg: ebtables bug: please report to author: bad policy
[  768.156347][ T2432] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xffffffff00000000}, 0x0)

13:23:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  768.257150][ T2445] PF_BRIDGE: br_mdb_parse() with invalid attr
[  768.284384][ T2448] PF_BRIDGE: br_mdb_parse() with invalid attr
[  768.342135][ T2449] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0)

13:23:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  768.395548][ T2459] kernel msg: ebtables bug: please report to author: bad policy
[  768.406818][ T2452] device nr0
 entered promiscuous mode
[  768.417590][ T2457] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  768.488745][ T2464] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000)

[  768.560480][ T2467] PF_BRIDGE: br_mdb_parse() with invalid attr
[  768.607419][ T2473] PF_BRIDGE: br_mdb_parse() with invalid attr
[  768.644988][ T2474] kernel msg: ebtables bug: please report to author: bad policy
13:23:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'n\x00\x00@\x00\x00\x00\x15\x00', 0x5400})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd794561da230b96ecd0e61381b60be8d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc857322591f34822c696a4182dd95d2c1d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f16929c9b9765b7c46287cc0673bdf00009f75e4a314fac44ede04428fafb864759325da7f117c73570a655cc672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a0000"], 0xd3)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x7b, 0x8}}, 0x30)

13:23:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000)

13:23:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  768.982892][ T2496] PF_BRIDGE: br_mdb_parse() with invalid attr
[  768.991720][ T2494] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.004153][ T2499] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.024120][ T2498] kernel msg: ebtables bug: please report to author: bad policy
13:23:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  769.093673][ T2510] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.131851][ T2518] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.157634][ T2522] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.183505][ T2526] kernel msg: ebtables bug: please report to author: bad policy
[  769.212231][ T2522] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0xfffffffffffffff6, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x204000)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth1\x00', 0x3}, 0x18)
socket$kcm(0x29, 0x4004000001, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000540)={0x3, 0x2, 0x20000000000000})
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000a00)={'team0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}})
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @remote, 0x3f}, 0x1c)
getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000440), &(0x7f00000004c0)=0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28030000", @ANYRES16=r7, @ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0xb28357406ac79629}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd3)

13:23:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000)

13:23:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.274858][ T2538] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.287824][ T2537] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.435791][ T2561] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.447150][ T2562] kernel msg: ebtables bug: please report to author: bad policy
[  769.466334][ T2558] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.473307][ T2556] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000)

13:23:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  769.584662][ T2575] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.620657][ T2583] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.629336][ T2582] kernel msg: ebtables bug: please report to author: bad policy
[  769.646616][ T2581] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.711397][ T2591] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.759578][ T2597] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.799043][ T2601] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:38 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xe8)
lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_virtio(&(0x7f0000000140)='v.\\\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=virtio,noextend,mmap,uname=/dev/ne@\x00\x00\x00\x00\x00\x00\x00ccess=client,appraise_type=imasig,obj_type=/dev/vcs\x00,euid>', @ANYRESDEC=r1, @ANYBLOB=',pcr=00000000000000000018,euid=', @ANYRESDEC=r2, @ANYBLOB=',fsmagic=0x0000000000000053,fsname=9em1,obj_type=syz1\x00,defcontext=user_u,\x00'])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0)
ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000600)={0x1, @bcast, @netrom={'nr', 0x0}, 0x8005, 'syz1\x00', @bcast, 0x6, 0x4, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0xfffffffff12365f2)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000680)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x100000001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
write$vnet(r4, &(0x7f0000000580)={0x1, {&(0x7f0000000440)=""/174, 0xae, &(0x7f0000000500)=""/66, 0x3, 0x7}}, 0x68)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb8647500000100000000000a6566c672603400f0f29404fdd3a9c936b3da0200b5e6b4b4f3233591e813e54a"], 0xd3)
ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000700)={0x0, @bt={0x2, 0x7, 0x1, 0x2, 0x1, 0xb80, 0xffffffffffffffc0, 0x2, 0x3, 0x2, 0xb42, 0x80000000, 0x2, 0xfff, 0x10, 0x3c}})

13:23:38 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000)

[  769.852932][ T2603] kernel msg: ebtables bug: please report to author: bad policy
13:23:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.902849][ T2609] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  769.951893][ T2614] PF_BRIDGE: br_mdb_parse() with invalid attr
[  769.993922][ T2622] __nla_parse: 48 callbacks suppressed
[  769.993928][ T2622] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:23:38 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  770.040977][ T2622] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000)

[  770.110022][ T2627] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  770.133490][ T2627] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000)

[  770.411519][ T2635] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  770.431042][ T2635] PF_BRIDGE: br_mdb_parse() with invalid attr
[  770.448985][ T2641] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:23:38 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  770.471738][ T2641] PF_BRIDGE: br_mdb_parse() with invalid attr
[  770.493811][ T2644] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  770.525772][ T2644] PF_BRIDGE: br_mdb_parse() with invalid attr
[  770.560029][ T2659] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:23:38 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x80)
getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4800000000000000)

13:23:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:38 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  770.586295][ T2659] PF_BRIDGE: br_mdb_parse() with invalid attr
[  770.650529][ T2665] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  770.685256][ T2665] PF_BRIDGE: br_mdb_parse() with invalid attr
[  770.906270][    C1] net_ratelimit: 24 callbacks suppressed
[  770.906275][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  770.917745][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  770.932433][ T2668] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  770.945946][ T2668] PF_BRIDGE: br_mdb_parse() with invalid attr
[  770.955087][ T2673] device nr0
 entered promiscuous mode
13:23:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x4c00000000000000)

13:23:39 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x5e18230000000000)

13:23:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000)

13:23:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000)

[  771.747773][ T2686] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  771.758367][ T2686] PF_BRIDGE: br_mdb_parse() with invalid attr
[  771.764576][ T2684] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  771.774619][ T2684] PF_BRIDGE: br_mdb_parse() with invalid attr
[  771.785414][ T2691] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:40 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x444}}, {@loose='loose'}, {@cachetag={'cachetag', 0x3d, '$-\x00'}}, {@access_any='access=any'}, {@mmap='mmap'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}})

13:23:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x6c00000000000000)

13:23:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  771.822743][ T2697] IPVS: ftp: loaded support on port[0] = 21
[  772.026264][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  772.032091][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  772.037968][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  772.043722][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  772.049604][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  772.055360][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  772.081108][ T2720] PF_BRIDGE: br_mdb_parse() with invalid attr
[  772.096089][ T2726] PF_BRIDGE: br_mdb_parse() with invalid attr
[  772.106237][ T2729] device nr0
 entered promiscuous mode
[  772.106267][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  772.117461][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  772.130019][ T2720] PF_BRIDGE: br_mdb_parse() with invalid attr
[  772.614195][ T2697] chnl_net:caif_netlink_parms(): no params data found
[  772.635626][ T2697] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.642838][ T2697] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.650776][ T2697] device bridge_slave_0 entered promiscuous mode
[  772.744238][ T2697] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.751435][ T2697] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.759408][ T2697] device bridge_slave_1 entered promiscuous mode
[  772.775482][ T2697] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  772.785251][ T2697] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  772.889917][ T2697] team0: Port device team_slave_0 added
[  772.897347][ T2697] team0: Port device team_slave_1 added
[  772.937600][ T2697] device hsr_slave_0 entered promiscuous mode
[  772.986423][ T2697] device hsr_slave_1 entered promiscuous mode
[  773.143550][ T2697] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.153919][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  773.161916][ T3474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  773.255921][ T2697] 8021q: adding VLAN 0 to HW filter on device team0
[  773.265021][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  773.273521][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  773.281799][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.288980][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.297120][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  773.305490][T14731] device bridge_slave_1 left promiscuous mode
[  773.311889][T14731] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.357183][T14731] device bridge_slave_0 left promiscuous mode
[  773.363282][T14731] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.877619][T14731] device hsr_slave_1 left promiscuous mode
[  775.930253][T14731] device hsr_slave_0 left promiscuous mode
[  775.970524][T14731] team0 (unregistering): Port device team_slave_1 removed
[  775.981048][T14731] team0 (unregistering): Port device team_slave_0 removed
[  775.992783][T14731] bond0 (unregistering): Releasing backup interface bond_slave_1
[  776.032080][T14731] bond0 (unregistering): Releasing backup interface bond_slave_0
[  776.115934][T14731] bond0 (unregistering): Released all slaves
[  776.196277][    C0] net_ratelimit: 14 callbacks suppressed
[  776.196283][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  776.201964][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  776.213472][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  776.219323][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  776.225148][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  776.225198][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  776.246459][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  776.254935][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  776.265797][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.266284][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  776.272880][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  776.278580][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  776.286655][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  776.309893][ T2697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  776.320338][ T2697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  776.332117][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  776.340667][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  776.349212][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  776.357540][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  776.365742][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  776.373967][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  776.382025][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  776.390780][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  776.398873][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  776.409173][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  776.416846][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  776.438096][ T2697] 8021q: adding VLAN 0 to HW filter on device batadv0
13:23:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:44 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7400000000000000)

13:23:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:44 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:44 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r2 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x800, 0x122)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000004c0)={[{0x7ff, 0x2, 0x401, 0x1, 0x6, 0x2, 0x6, 0x100000000, 0x0, 0x4, 0x467, 0x7f, 0x6}, {0xb6, 0x80000001, 0xfffffffffffffff8, 0x8, 0x100000001, 0xfffffffffffffffb, 0x200000000000, 0x7, 0x9, 0x10001, 0x3, 0x3ff, 0x1}, {0x0, 0x9, 0x3f, 0x2, 0x2, 0x4, 0xcc, 0x3, 0x80000001, 0x7fff, 0x7, 0x100000, 0x8}], 0xffff})
r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40, 0x24c0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000440)={0x16, 0x81, &(0x7f0000000040)="fe099e7b13d560a06a9e9e51dde698a7b3ced43b0c0dcb1b25d67c77fb6495580aafe7048f413d7beb4637f9d05a58cc2c9527e41aa9b5b908836da697a99d0db2dd580690691f7b6a61e7c7fd615ac3e22daa811239a196e4a3b444a0987dd7edb8aaae414c7b98752a7e5f20e8f7e1aa16e5d6546d6b33d096c616c5ceca9ee9"})
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  776.506473][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  776.512244][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  776.520385][ T2745] kernel msg: ebtables bug: please report to author: bad policy
[  776.570758][ T2756] __nla_parse: 4 callbacks suppressed
[  776.570767][ T2756] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  776.602448][ T2756] PF_BRIDGE: br_mdb_parse() with invalid attr
[  776.616158][ T2758] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  776.630428][ T2758] PF_BRIDGE: br_mdb_parse() with invalid attr
[  776.646984][ T2761] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:23:44 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  776.701894][ T2761] PF_BRIDGE: br_mdb_parse() with invalid attr
[  776.711741][ T2768] kernel msg: ebtables bug: please report to author: bad policy
13:23:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a00000000000000)

13:23:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  776.813738][ T2776] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:45 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  776.860817][ T2776] PF_BRIDGE: br_mdb_parse() with invalid attr
[  776.883064][ T2784] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  776.903319][ T2779] kernel msg: ebtables bug: please report to author: bad policy
13:23:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  776.942786][ T2791] kernel msg: ebtables bug: please report to author: bad policy
[  776.976369][ T2784] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  776.984926][ T2782] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  777.009401][ T2782] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000)

[  777.055041][ T2797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  777.100088][ T2797] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.144765][ T2805] kernel msg: ebtables bug: please report to author: bad policy
[  777.175069][ T2808] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:23:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  777.190335][ T2810] kernel msg: ebtables bug: please report to author: bad policy
13:23:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  777.241227][ T2808] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  777.316907][ T2814] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  777.340391][ T2814] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.355476][ T2819] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xceffffffffffffff)

13:23:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  777.394761][ T2819] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:45 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa80, 0x0)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  777.437308][ T2823] kernel msg: ebtables bug: please report to author: bad policy
[  777.451217][ T2819] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.482151][ T2829] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.499031][ T2833] kernel msg: ebtables bug: please report to author: bad policy
13:23:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  777.524152][ T2836] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  777.637645][ T2843] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.684182][ T2849] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.715265][ T2846] kernel msg: ebtables bug: please report to author: bad policy
13:23:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  777.743790][ T2856] kernel msg: ebtables bug: please report to author: bad policy
[  777.772045][ T2855] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000)

[  777.823641][ T2860] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  777.931007][ T2869] PF_BRIDGE: br_mdb_parse() with invalid attr
[  777.979239][ T2867] kernel msg: ebtables bug: please report to author: bad policy
13:23:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  778.022200][ T2878] PF_BRIDGE: br_mdb_parse() with invalid attr
[  778.077621][ T2881] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  778.163886][ T2886] PF_BRIDGE: br_mdb_parse() with invalid attr
[  778.184149][ T2890] kernel msg: ebtables bug: please report to author: bad policy
[  778.245166][ T2896] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffff000000000000)

13:23:46 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={<r2=>0x0, 0x39853e6a}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x5}, 0x8)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
listen(r1, 0x7b)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  778.325152][ T2901] PF_BRIDGE: br_mdb_parse() with invalid attr
[  778.381960][ T2900] kernel msg: ebtables bug: please report to author: bad policy
13:23:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  778.432190][ T2909] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  778.476058][ T2915] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  778.559519][ T2922] kernel msg: ebtables bug: please report to author: bad policy
13:23:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:46 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000001070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc15732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7cf8e3e48b673bdf75b89f75e4a314fac4025b04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  778.628522][ T2927] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000)

13:23:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  778.711777][ T2928] PF_BRIDGE: br_mdb_parse() with invalid attr
[  778.735528][ T2933] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  778.802610][ T2937] kernel msg: ebtables bug: please report to author: bad policy
[  778.842346][ T2945] kernel msg: ebtables bug: please report to author: bad policy
13:23:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  778.896535][ T2950] PF_BRIDGE: br_mdb_parse() with invalid attr
[  778.936390][ T2951] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  778.966950][ T2940] device nr0
 entered promiscuous mode
[  778.977441][ T2957] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffce)

[  779.104655][ T2966] kernel msg: ebtables bug: please report to author: bad policy
13:23:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffff)

[  779.462836][ T2964] PF_BRIDGE: br_mdb_parse() with invalid attr
[  779.467341][ T2981] kernel msg: ebtables bug: please report to author: bad policy
[  779.475359][ T2974] PF_BRIDGE: br_mdb_parse() with invalid attr
[  779.483245][ T2971] PF_BRIDGE: br_mdb_parse() with invalid attr
[  779.506427][ T2974] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  779.529652][ T2964] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:47 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x1, @remote, 0x9}, {0xa, 0x5, 0x7, @remote}, 0x1ff, [0x6, 0x3ff, 0x1, 0x20, 0x4, 0x6, 0x2, 0x5e54dfa5]}, 0x5c)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x15002, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  779.644949][ T2991] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  779.734151][ T3003] kernel msg: ebtables bug: please report to author: bad policy
[  779.736434][ T2998] PF_BRIDGE: br_mdb_parse() with invalid attr
[  779.753730][ T3007] kernel msg: ebtables bug: please report to author: bad policy
13:23:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  779.779635][ T3009] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  779.882416][ T3015] kernel msg: ebtables bug: please report to author: bad policy
[  779.893208][ T3016] PF_BRIDGE: br_mdb_parse() with invalid attr
[  779.918470][ T3020] device nr0
 entered promiscuous mode
13:23:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  779.953577][ T3024] kernel msg: ebtables bug: please report to author: bad policy
13:23:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  780.160615][ T3040] kernel msg: ebtables bug: please report to author: bad policy
[  780.248059][ T3029] PF_BRIDGE: br_mdb_parse() with invalid attr
[  780.254376][ T3030] PF_BRIDGE: br_mdb_parse() with invalid attr
[  780.261883][ T3035] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:48 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa65b7f40eb2361ea8386e208fed8a5e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e"], 0xd3)

13:23:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0xd000, 0x0, 0x80000000, 0x4, 0x0, [{0x6, 0xfffffffffffffffb, 0x4, [], 0x7}, {0x6, 0x100, 0x4, [], 0x400}, {0x4, 0x8, 0x400, [], 0x6}, {0x4, 0x100, 0x8, [], 0xd18}, {0x9be, 0x9, 0x7, [], 0x80000000}, {0x3ff, 0x6, 0x9, [], 0x9}, {0x9, 0x3f, 0xfffffffeffffffff, [], 0x1f}, {0x5, 0x5, 0xffc0, [], 0x7fff}, {0x2, 0x100, 0x3ff, [], 0xfb}, {0xfffffffffffffff7, 0x3, 0x1, [], 0x7}, {0x800, 0xffffffffffff604c, 0x101}, {0x15c5, 0x3f, 0x1, [], 0x6}, {0x3, 0xe7d2, 0x13, [], 0x1ff}, {0x800, 0xff, 0x7f, [], 0x4}, {0x1, 0x0, 0x5, [], 0x3}, {0x101, 0x8, 0x1, [], 0x401}, {0x100000001, 0x3, 0x100000001, [], 0x80}, {0xfffffffffffffffc, 0x3, 0x897, [], 0x9f}, {0x9, 0x8, 0x0, [], 0x64f}, {0x15, 0x5f4, 0x0, [], 0x3}, {0xffffffffffffffff, 0xf94, 0x2b, [], 0x8}, {0x8, 0xcd, 0x1, [], 0x7}, {0x77, 0xfffffffffffffbff, 0x2, [], 0x9}, {0x9, 0xadd6, 0x401, [], 0x7fffffff}]}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  780.396768][ T3057] PF_BRIDGE: br_mdb_parse() with invalid attr
[  780.416935][ T3054] kernel msg: ebtables bug: please report to author: bad policy
[  780.447892][ T3061] PF_BRIDGE: br_mdb_parse() with invalid attr
[  780.465667][ T3060] PF_BRIDGE: br_mdb_parse() with invalid attr
[  780.475976][ T3067] kernel msg: ebtables bug: please report to author: bad policy
[  780.480691][ T3051] kvm: pic: single mode not supported
13:23:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  780.485431][ T3062] kvm: pic: level sensitive irq not supported
[  780.497724][ T3051] kvm: pic: level sensitive irq not supported
[  780.502186][ T3865] kvm: pic: single mode not supported
13:23:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  780.579980][ T3062] device nr0
 entered promiscuous mode
[  780.644746][ T3077] PF_BRIDGE: br_mdb_parse() with invalid attr
[  780.677192][ T3080] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  780.767432][ T3089] kernel msg: ebtables bug: please report to author: bad policy
[  781.074320][ T3084] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.083626][ T3096] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.099541][ T3097] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:49 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x100000000000002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccc8e0cca10f0d8543f96fa7f2516027f1832900b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:49 executing program 2:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x90000, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000480)=""/209, &(0x7f0000000440)=0x14)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)=<r4=>0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=<r5=>0x0)
setpgid(r4, r5)
ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0xfffffffffffffc80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x5, 0xf1, 0x100, 0xfffffffffffffff7, 0x8, 0xffffffff, 0x7, 0x62, 0x6093, 0x4d75a590, 0x7, 0x22a5, 0x70, 0xd5, 0x3ff, 0xbec5}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket(0x0, 0x3, 0xc1e)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000002c0)={0x81, 0x7, 0x0, 0x3}, 0xfffffffffffffe58)

13:23:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  781.229858][ T3116] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.262381][ T3122] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.270454][ T3119] kernel msg: ebtables bug: please report to author: bad policy
13:23:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  781.283963][ T3123] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.299663][ T3125] kernel msg: ebtables bug: please report to author: bad policy
13:23:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  781.339234][ T3110] kvm: pic: single mode not supported
[  781.341751][ T3865] kvm: pic: level sensitive irq not supported
[  781.366785][ T3124] device nr0
 entered promiscuous mode
13:23:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  781.418081][ T3132] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.425860][ T3110] kvm: pic: level sensitive irq not supported
[  781.443713][ T3865] kvm: pic: single mode not supported
[  781.554887][ T3149] kernel msg: ebtables bug: please report to author: bad policy
13:23:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x400, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, <r4=>0x0, 0x400})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000002c0)={r4, 0x80000, r5})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  781.789163][ T3142] __nla_parse: 45 callbacks suppressed
[  781.789171][ T3142] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  781.804090][ T3142] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.818678][ T3138] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  781.830358][ T3138] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.855071][ T3148] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  781.873191][ T3148] kvm: pic: single mode not supported
[  781.874140][ T3148] PF_BRIDGE: br_mdb_parse() with invalid attr
[  781.881564][ T3158] kvm: pic: level sensitive irq not supported
[  781.882578][ T3111] kvm: pic: level sensitive irq not supported
[  781.913025][ T3111] kvm: pic: single mode not supported
13:23:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd9b, 0x40040)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x3000, 0x6000, 0x10000], 0xdbb, 0x81, 0x20000000000})
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:50 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  782.035366][ T3173] kernel msg: ebtables bug: please report to author: bad policy
[  782.043236][ T3171] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  782.078792][ T3171] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.086240][ T3175] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  782.086372][ T3180] kernel msg: ebtables bug: please report to author: bad policy
[  782.102333][ T3175] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.109685][ T3170] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:23:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  782.129889][ T3170] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  782.181995][ T3186] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  782.196405][ T3186] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:50 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'n\x00\x00\x00@\x00\x00\x00\x00\x00\a\x00', 0x5000})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0)
write$apparmor_current(r1, &(0x7f0000000440)=@hat={'permhat ', 0x2, 0x5e, ['/dev/net/tun\x00', 'self\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&', 'em1}selinux\x00', '/dev/net/tun\x00', 'selfsystem+,wlan0securityeth0wlan0cgroupposix_acl_access\\\x00', ']md5sum\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&']}, 0x3d2)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x800})
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
getsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f00000000c0), &(0x7f0000000300)=0x4)

[  782.305840][ T3200] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  782.334789][ T3200] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.354811][ T3203] kernel msg: ebtables bug: please report to author: bad policy
[  782.362596][ T3201] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  782.368165][ T3212] kvm: pic: single mode not supported
[  782.383649][ T3212] kernel msg: ebtables bug: please report to author: bad policy
[  782.405841][ T3199] kvm: pic: level sensitive irq not supported
[  782.408906][ T3201] kvm: pic: level sensitive irq not supported
[  782.413850][ T3201] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.436255][    C0] net_ratelimit: 32 callbacks suppressed
[  782.436261][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  782.447660][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  782.449730][ T3206] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  782.453461][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  782.462962][ T3206] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.468377][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  782.468458][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  782.485938][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  782.503775][ T3206] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.510328][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  782.510384][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  782.525243][ T3199] kvm: pic: single mode not supported
13:23:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x420100)
ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0)

13:23:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  782.655847][ T3233] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.664777][ T3236] kernel msg: ebtables bug: please report to author: bad policy
[  782.667101][ T3238] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.679582][ T3228] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.693825][ T3242] kernel msg: ebtables bug: please report to author: bad policy
13:23:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:51 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8)
r2 = syz_open_dev$mouse(&(0x7f0000000700)='/dev/input/mouse#\x00', 0xb8a6, 0x109900)
bind$xdp(r0, &(0x7f0000000740)={0x2c, 0x4, r1, 0x2d, r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0)
ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0xffffffffffffffff)
ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000040)={0x0, 0x7e, 0xfffffffffffffff9, 0xfff, 0x7fffffff, 0x1a, 0x5, "6af066d089f58453f99c894ad00400f6697d8cb2", "6aa5a40b75cdca55c256649f2e4722b6ab645e37"})
bind$alg(r3, 0x0, 0x0)
epoll_pwait(r5, &(0x7f0000000080), 0x0, 0x8, &(0x7f00000000c0)={0xe2d0}, 0x7)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  782.750570][ T3237] kvm: pic: single mode not supported
[  782.752548][ T3865] kvm: pic: level sensitive irq not supported
[  782.770572][ T3237] kvm: pic: level sensitive irq not supported
13:23:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:51 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  782.774538][ T3251] kvm: pic: single mode not supported
[  782.802042][ T3251] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  782.867882][ T3255] kernel msg: ebtables bug: please report to author: bad policy
[  782.889137][ T3261] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.929908][ T3266] PF_BRIDGE: br_mdb_parse() with invalid attr
[  782.999707][ T3273] device nr0
 entered promiscuous mode
[  783.013820][ T3271] kernel msg: ebtables bug: please report to author: bad policy
[  783.022508][ T3275] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.046783][ T3277] kernel msg: ebtables bug: please report to author: bad policy
[  783.066251][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  783.072019][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:23:51 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000000c0)={0x22, 0x3, 0x0, {0x6, 0x1, 0x0, ':'}}, 0x22)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0)

13:23:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.397591][ T3290] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.414985][ T3299] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.434119][ T3297] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.445508][ T3298] kernel msg: ebtables bug: please report to author: bad policy
[  783.473445][ T3305] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:51 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:51 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.501841][ T3308] kernel msg: ebtables bug: please report to author: bad policy
13:23:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  783.587188][ T3322] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.621172][ T3327] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.658467][ T3328] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfff, 0x200200)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001c000/0x18000)=nil, 0x0, 0x1d, 0xffffffffffffdff7, 0x0, 0xffffffffffffff8c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:23:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.715265][ T3334] kernel msg: ebtables bug: please report to author: bad policy
13:23:52 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
dup3(r1, r3, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0xffffffffffffff17)

[  783.783872][ T3338] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.791658][ T3344] kernel msg: ebtables bug: please report to author: bad policy
[  783.813738][ T3346] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.837640][ T3348] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  783.948585][ T3358] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.971010][ T3360] PF_BRIDGE: br_mdb_parse() with invalid attr
[  783.992477][ T3354] device nr0
 entered promiscuous mode
13:23:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  784.022561][ T3365] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x240})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  784.067740][ T3372] kernel msg: ebtables bug: please report to author: bad policy
[  784.253878][ T3387] kernel msg: ebtables bug: please report to author: bad policy
13:23:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000040)=0x100)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  784.442167][ T3376] PF_BRIDGE: br_mdb_parse() with invalid attr
[  784.449941][ T3377] PF_BRIDGE: br_mdb_parse() with invalid attr
[  784.461117][ T3382] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:52 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x440000)
write$cgroup_subtree(r1, &(0x7f0000001440)=ANY=[@ANYBLOB="426d656d6f7279202b72646d61202f696f202b637075208734af45c16e3c7c7312999771778b2b3db347ae2c71d633da0d356ee85b5fae2c53d07c8768918e066cf65343165300000000000000f4011e3333196bc20e8728135d0abd6d5778736361a6e7b5909b9430c570c987fe2f19527dbca7020904eccf22a7b81bb432d46262b046a5321670fc3b49e31d2f891f1168e38d887e2b69ef27b7630983bd207ab19b7d4fa8cfed5e6315498309ce506395fc5f37f3039f9d376b155cf8231ad111e15064c94f9ae3783007c3b7840dd0ee8b0b00c0a72b38ad57"], 0x17)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x40100, 0x0)
ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000040))
r4 = socket$kcm(0x29, 0x5, 0x0)
ioctl(r2, 0x7, &(0x7f0000000440)="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")
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  784.502892][ T3387] kernel msg: ebtables bug: please report to author: bad policy
13:23:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  784.630888][ T3405] PF_BRIDGE: br_mdb_parse() with invalid attr
[  784.668379][ T3406] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  784.680275][ T3404] PF_BRIDGE: br_mdb_parse() with invalid attr
[  784.693955][ T3409] kernel msg: ebtables bug: please report to author: bad policy
[  784.710511][ T3411] kernel msg: ebtables bug: please report to author: bad policy
13:23:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  784.727042][ T3414] device nr0
 entered promiscuous mode
13:23:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  784.922654][ T3428] kernel msg: ebtables bug: please report to author: bad policy
13:23:53 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.035623][ T3419] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.046567][ T3422] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.052664][ T3425] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.060546][ T3425] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.067671][ T3430] kernel msg: ebtables bug: please report to author: bad policy
13:23:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800000024600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpeername(r3, 0xffffffffffffffff, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8)
r5 = getgid()
chown(&(0x7f0000000040)='./file0\x00', r4, r5)

13:23:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1e38d6ab, 0x7, 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x100})
close(r1)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000080)={0x3, 0x5fa0da32, 0x1, 0x8, 0x18})
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xd3)

[  785.204289][ T3439] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.223405][ T3440] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.267578][ T3440] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.295331][ T3444] kernel msg: ebtables bug: please report to author: bad policy
13:23:53 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.324421][ T3447] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.329319][ T3451] kernel msg: ebtables bug: please report to author: bad policy
13:23:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  785.367160][ T3446] device nr0
 entered promiscuous mode
[  785.390981][ T3458] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10700, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', r2})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  785.425487][ T3464] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:53 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.546791][ T3476] kernel msg: ebtables bug: please report to author: bad policy
[  785.659448][ T3481] pic_ioport_write: 7 callbacks suppressed
[  785.659453][ T3481] kvm: pic: single mode not supported
[  785.663803][ T3481] pic_ioport_write: 8 callbacks suppressed
[  785.663857][ T3481] kvm: pic: level sensitive irq not supported
[  785.665443][ T3481] kvm: pic: level sensitive irq not supported
13:23:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.701786][ T3441] kvm: pic: single mode not supported
[  785.775000][ T3471] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.782191][ T3479] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.793262][ T3482] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:54 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.834542][ T3485] kernel msg: ebtables bug: please report to author: bad policy
13:23:54 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'rose0\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0)
connect$rds(r2, &(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa615e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  785.901983][ T3493] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  785.951328][ T3496] PF_BRIDGE: br_mdb_parse() with invalid attr
[  785.961429][ T3498] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  786.081596][ T3509] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.088002][ T3504] kernel msg: ebtables bug: please report to author: bad policy
[  786.106321][ T3511] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.113428][ T3515] kernel msg: ebtables bug: please report to author: bad policy
[  786.156971][ T3518] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.270973][ T3525] kvm: pic: single mode not supported
[  786.273277][ T3865] kvm: pic: level sensitive irq not supported
[  786.301550][ T3525] kvm: pic: level sensitive irq not supported
[  786.304933][ T3865] kvm: pic: single mode not supported
13:23:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
geteuid()
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="b92a020000b8e4000000ba000000000f300f019e02ae00002ed11d49000000670f01c9c4e1755d716ac744240065690000c74424020a000000c7442406000000000f011c240f01ba030000000f01cab8003800000f23d00f21f8350000000a0f23f866bad104ed", 0x67}], 0x1, 0x40, &(0x7f0000000440)=[@dstype3={0x7, 0xf}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:23:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x7)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xbb17, 0x404040)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0xfffffffffffffffc, 0x2, 0xffffffffffffff7f, 0x3f}, 'syz1\x00', 0xa})
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

[  786.389499][ T3532] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.417188][ T3534] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  786.433926][ T3539] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.442589][ T3538] kernel msg: ebtables bug: please report to author: bad policy
[  786.467313][ T3542] kernel msg: ebtables bug: please report to author: bad policy
[  786.528590][ T3536] device nr0
 entered promiscuous mode
13:23:54 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000003c0)={r2, &(0x7f0000000300)=""/139})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={<r3=>0x0, @in={{0x2, 0x4e20, @empty}}, 0xfd9b, 0x10000, 0x872b, 0x7f, 0x4}, &(0x7f0000000500)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x1400000000000, 0x200, 0x8207, 0x7fffffff, 0x0, 0x0, 0x8f45, 0x3, r3}, 0x20)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0xc02c0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  786.653168][ T3561] kernel msg: ebtables bug: please report to author: bad policy
13:23:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="320000000400000011000000000000000400000000000000032364ad00000000e8ffff08000000000000002f6465762f6b766d0000"], 0x32)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  786.878055][ T3560] __nla_parse: 49 callbacks suppressed
[  786.878067][ T3560] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  786.893607][ T3560] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.905108][ T3556] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  786.915978][ T3556] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x800, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[{}, {<r2=>0x0}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000002c0)={r2, 0x8})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="440f20c0350a000000440f22c0660f388078070f090f01cfb9100600000f3226666764f4c4a21d08a08000c0fe660f620c3cc4023d90bccb00280000410f09", 0x3f}], 0x1, 0x0, 0x0, 0x100)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:23:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  786.927876][ T3558] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  786.943854][ T3558] PF_BRIDGE: br_mdb_parse() with invalid attr
[  786.967615][ T3559] kernel msg: ebtables bug: please report to author: bad policy
13:23:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e9013880fbe5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89fc4551d44de9a75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:55 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  787.059479][ T3583] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:23:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  787.099921][ T3583] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.115501][ T3581] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:23:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  787.162917][ T3581] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.202986][ T3589] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:23:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:55 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  787.243060][ T3589] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.250565][ T3596] kernel msg: ebtables bug: please report to author: bad policy
[  787.253449][ T3597] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  787.268514][ T3600] kernel msg: ebtables bug: please report to author: bad policy
13:23:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  787.309315][ T3597] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.315720][ T3588] device nr0
 entered promiscuous mode
13:23:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  787.490838][ T3613] kvm: pic: single mode not supported
[  787.493229][ T3613] kvm: pic: level sensitive irq not supported
[  787.502652][ T3613] kvm: pic: level sensitive irq not supported
[  787.515726][ T3618] kvm: pic: single mode not supported
[  787.524758][ T3618] kernel msg: ebtables bug: please report to author: bad policy
[  787.647740][ T3609] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  787.662069][ T3609] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.668462][ T3611] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  787.683064][ T3611] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:56 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  787.695834][ T3617] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  787.705835][ T3617] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.712461][ T3622] kernel msg: ebtables bug: please report to author: bad policy
13:23:56 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xd3)

13:23:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  787.777765][ T3625] kvm: pic: single mode not supported
[  787.783217][ T3865] kvm: pic: level sensitive irq not supported
[  787.800294][ T3628] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  787.848645][ T3625] kvm: pic: level sensitive irq not supported
[  787.871641][ T3865] kvm: pic: single mode not supported
[  787.931040][ T3635] PF_BRIDGE: br_mdb_parse() with invalid attr
[  787.954268][ T3639] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x7f, 0xbf, 0x6, 0x0, [{0x400, 0xffffffff, 0x2, [], 0x7}, {0x1d, 0x200, 0x8, [], 0xfff}, {0xe1f, 0x0, 0x80000000}, {0x48, 0x8, 0xe4, [], 0x77}, {0x6, 0x7, 0xa8fc, [], 0x1}, {0x80, 0x0, 0x5, [], 0xfffffffffffffff9}, {0x6, 0x100000001, 0x8, [], 0x4}, {0x401, 0xc6, 0x100000001, [], 0xaf}, {0x1, 0x3fc8, 0x5}, {0x2, 0x1, 0xffff, [], 0xba6}, {0x2, 0x10000, 0x200, [], 0x9}, {0x36b, 0x9, 0x80, [], 0x793}, {0x3fc00000000000, 0x7, 0x7, [], 0xac2}, {0xffffffffffffff05, 0x7fffffff, 0x9, [], 0x40}, {0x6, 0x8, 0x3}, {0x4, 0x42, 0x1ff, [], 0x2}, {0xffff, 0x200, 0x393b, [], 0x1}, {0x2, 0x6, 0x2, [], 0x9}, {0x7ff, 0x101, 0x100, [], 0x1}, {0x4, 0x7e6, 0x4, [], 0x8}, {0x8, 0x400, 0x1ff, [], 0xffffffff}, {0xfbc, 0x4, 0x3311, [], 0x1f}, {0x3, 0x10001, 0x4, [], 0xcc}, {0x7, 0x8, 0x401, [], 0x758}]}})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141a40, 0x61)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040))

13:23:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:56 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  787.980537][ T3641] kernel msg: ebtables bug: please report to author: bad policy
[  787.988423][ T3642] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.009507][ T3647] kernel msg: ebtables bug: please report to author: bad policy
13:23:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  788.051161][ T3633] device nr0
 entered promiscuous mode
13:23:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.166083][ T3665] kernel msg: ebtables bug: please report to author: bad policy
[  788.188538][ T3653] kvm: pic: single mode not supported
[  788.190876][ T3653] kvm: pic: level sensitive irq not supported
[  788.197522][ T3653] kvm: pic: level sensitive irq not supported
[  788.209218][ T3663] kvm: pic: single mode not supported
[  788.433748][ T3658] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.452845][ T3661] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.459357][ T3671] kernel msg: ebtables bug: please report to author: bad policy
[  788.469365][ T3664] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:56 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x80\x00', 0x4001})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='\x00\x00\x80\x00')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0063869096030e01070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076e7f36867d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d80648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44e0caff020d919f8000025da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:23:56 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.634666][ T3690] kernel msg: ebtables bug: please report to author: bad policy
[  788.645332][ T3689] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.659827][ T3694] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.666236][    C0] net_ratelimit: 26 callbacks suppressed
[  788.666242][    C0] protocol 88fb is buggy, dev hsr_slave_0
13:23:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.673399][ T3696] kernel msg: ebtables bug: please report to author: bad policy
[  788.677678][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  788.677756][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  788.688899][ T3691] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.691097][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  788.708658][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  788.714440][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:23:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))
r3 = accept(0xffffffffffffff9c, &(0x7f00000002c0)=@can, &(0x7f0000000040)=0x80)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x390, 0x140, 0x140, 0x0, 0x0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x3, &(0x7f0000000100), {[{{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'ifb0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x0, 0x1ff, 0x1, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x1000, 0x5}}}, {{@ipv6={@local, @rand_addr="51424494c7018d329bbac1452d695298", [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xff000000], 'ip_vti0\x00', 'sit0\x00', {0xff}, {0xff}, 0x11, 0x3, 0x1, 0x8}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x401, 0x94, 0x6b, 'netbios-ns\x00', 'syz1\x00', 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.746270][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  788.752056][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:23:57 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.824992][ T3705] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:57 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.901298][ T3703] kernel msg: ebtables bug: please report to author: bad policy
[  788.908605][ T3713] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.928661][ T3714] PF_BRIDGE: br_mdb_parse() with invalid attr
[  788.933909][ T3719] kernel msg: ebtables bug: please report to author: bad policy
13:23:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b0d623435c09a71bc86241a922fbba78d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3"], 0xd3)

13:23:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  788.989663][ T3722] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  789.087437][ T3732] PF_BRIDGE: br_mdb_parse() with invalid attr
[  789.102576][ T3733] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:57 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  789.221020][ T3743] PF_BRIDGE: br_mdb_parse() with invalid attr
[  789.249920][ T3745] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  789.272272][ T3746] PF_BRIDGE: br_mdb_parse() with invalid attr
[  789.306270][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  789.312048][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  789.354044][ T3751] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:57 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0xffffffff, 0x40000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8000, 0x8, 0x9, 0xf9, <r3=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x1, 0x7a69}, &(0x7f0000000300)=0x8)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000340)={0x100000000000000, 0xf000, 0x7, 0x2, 0x1c})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:23:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:57 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  789.548863][ T3761] PF_BRIDGE: br_mdb_parse() with invalid attr
[  789.566204][ T3762] PF_BRIDGE: br_mdb_parse() with invalid attr
[  789.572384][ T3763] PF_BRIDGE: br_mdb_parse() with invalid attr
[  789.677968][ T3770] PF_BRIDGE: br_mdb_parse() with invalid attr
13:23:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r2)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x9, r3, 0x1, 0x6, 0x6, @random="45d75140842e"}, 0x14)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f058543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a682d77414123a3b215bbf7ddd3a66fd1d591cfd1774c822bfbe70cbe93b3a924a33655add7e1bff20813501e33ebb6ac20a73fd4e2e6853c444508ef9a8af58b71f90fb8be7ba44c9275726fc694867c67be2c09c41b35f1cb648d434fddce2679"], 0xd3)

[  790.071461][ T3778] device nr0
 entered promiscuous mode
13:23:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:23:58 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:58 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:23:58 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x1, 0x121000)
ioctl$RTC_WIE_ON(r0, 0x700f)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000480)={"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"})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000019c0)={0x3, 0x1, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=""/164, &(0x7f0000001940)=""/84, 0x10000})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000440)='/dev/capi20\x00', 0x80, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00', <r3=>0x0})
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x3f, &(0x7f0000000000)="0f50f4b5ac996263720656e539b116e501768bd8e379fe3f75b487c5db3ae40a1f86dccd124fae3b53a0b09ac4ad7aeca35a2f02679d1d8c74", 0x39)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
bind$can_raw(r4, &(0x7f00000003c0)={0x1d, r3}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000380)=0x2, 0x4)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x50, &(0x7f00000002c0)}, 0x10)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'team_slave_0\x00', 0x2000})

13:23:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2021c1, 0x0)
bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:23:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x30004004}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r5, 0x430, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb28}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1bd00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @empty}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x37}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4080}, 0x894)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x68, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000002c0)=ANY=[@ANYBLOB="03008700b144f4273c2b11d8419f765fdd729497141e4dc593a355a2a93815d2184e906ffc7cd63d2e9568e3200d3948e6b66e13fe5d3d69cd0ac32b44da7777edab81d6b68defdf3b0a16896e2f41e6ea2ca5a84fda071b1d682bbe90f2d589c05a0264c9a99024e977a6709486732e8f874e6194e3393fbb2f133ed90cc05cdfce2a3dbaaafa1cd91ac6"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:23:59 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  790.804684][ T3782] PF_BRIDGE: br_mdb_parse() with invalid attr
[  790.811034][ T3787] PF_BRIDGE: br_mdb_parse() with invalid attr
[  790.817439][ T3788] PF_BRIDGE: br_mdb_parse() with invalid attr
[  790.829183][ T3791] IPVS: ftp: loaded support on port[0] = 21
13:23:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2)

13:23:59 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000440)=""/4096)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61dab552ea7b6a4e4b9c12a906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6"], 0xd3)

13:23:59 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  791.021678][ T3803] pic_ioport_write: 10 callbacks suppressed
[  791.021683][ T3803] kvm: pic: single mode not supported
[  791.023878][ T3803] pic_ioport_write: 10 callbacks suppressed
[  791.023882][ T3803] kvm: pic: level sensitive irq not supported
[  791.024718][ T3803] kvm: pic: level sensitive irq not supported
13:23:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3)

[  791.056421][   T21] kvm: pic: single mode not supported
[  791.179097][ T3809] PF_BRIDGE: br_mdb_parse() with invalid attr
[  791.185466][ T3811] PF_BRIDGE: br_mdb_parse() with invalid attr
[  791.192226][ T3813] PF_BRIDGE: br_mdb_parse() with invalid attr
[  791.327674][ T3819] kvm: pic: single mode not supported
[  791.329657][ T3819] kvm: pic: level sensitive irq not supported
[  791.335902][ T3819] kvm: pic: level sensitive irq not supported
[  791.440111][ T3815] device nr0
 entered promiscuous mode
[  791.804790][ T3791] chnl_net:caif_netlink_parms(): no params data found
[  791.835610][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.842807][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.851810][ T3791] device bridge_slave_0 entered promiscuous mode
[  791.943537][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.950713][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.958357][ T3791] device bridge_slave_1 entered promiscuous mode
[  792.061193][ T3791] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  792.071378][ T3791] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  792.085574][ T3791] team0: Port device team_slave_0 added
[  792.092601][ T3791] team0: Port device team_slave_1 added
[  792.227820][ T3791] device hsr_slave_0 entered promiscuous mode
[  792.286652][ T3791] device hsr_slave_1 entered promiscuous mode
[  792.493656][ T3791] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.500988][   T21] device bridge_slave_1 left promiscuous mode
[  792.513519][   T21] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.556861][   T21] device bridge_slave_0 left promiscuous mode
[  792.562977][   T21] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.906249][    C0] net_ratelimit: 24 callbacks suppressed
[  794.906256][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  794.917659][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  794.923419][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  794.929189][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  794.934947][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  794.940701][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  794.986243][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  794.991968][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  795.128325][   T21] device hsr_slave_1 left promiscuous mode
[  795.199395][   T21] device hsr_slave_0 left promiscuous mode
[  795.259018][   T21] team0 (unregistering): Port device team_slave_1 removed
[  795.272318][   T21] team0 (unregistering): Port device team_slave_0 removed
[  795.283246][   T21] bond0 (unregistering): Releasing backup interface bond_slave_1
[  795.321634][   T21] bond0 (unregistering): Releasing backup interface bond_slave_0
[  795.386015][   T21] bond0 (unregistering): Released all slaves
[  795.464868][ T3791] 8021q: adding VLAN 0 to HW filter on device team0
[  795.472439][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  795.481255][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  795.488881][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  795.499615][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  795.508282][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  795.516928][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.523981][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.531906][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  795.551001][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  795.559938][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  795.568775][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.575793][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.583363][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  795.591774][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  795.600194][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  795.608654][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  795.616953][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  795.625929][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  795.626291][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  795.635178][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  795.639506][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  795.660827][ T3791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  795.672148][ T3791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  795.684088][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  795.692580][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  795.700966][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  795.709215][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  795.717580][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  795.772126][ T3791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  795.807516][ T3832] kernel msg: ebtables bug: please report to author: bad policy
13:24:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:04 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:04 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4)

13:24:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfff, 0x4000)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000))

13:24:04 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040))
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x400000006, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  795.815728][ T3834] kernel msg: ebtables bug: please report to author: bad policy
[  795.871780][ T3841] __nla_parse: 30 callbacks suppressed
[  795.871786][ T3841] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  795.938607][ T3841] PF_BRIDGE: br_mdb_parse() with invalid attr
[  795.955331][ T3843] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  795.970824][ T3843] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:04 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5)

[  795.980163][ T3847] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  795.996388][ T3850] kernel msg: ebtables bug: please report to author: bad policy
[  796.004288][ T3847] PF_BRIDGE: br_mdb_parse() with invalid attr
[  796.014449][ T3846] kvm: pic: single mode not supported
13:24:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  796.020585][ T3850] kvm: pic: level sensitive irq not supported
[  796.048567][ T3850] kernel msg: ebtables bug: please report to author: bad policy
13:24:04 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  796.162385][ T3860] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  796.186449][ T3860] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0)
bind$nfc_llcp(r2, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x1, 0x100000001, 0x1, "5e1a7cef768cea00318500df543d7862c2f0caa3ff1271a9dccf5f7accbd61cfa54caa00effacf4f462137d64fbe3ec240013b8d7ab9eb89f198b169bffc35", 0x8}, 0x60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
creat(&(0x7f0000000000)='./file0\x00', 0x60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:04 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6)

[  796.255216][ T3866] kernel msg: ebtables bug: please report to author: bad policy
[  796.291942][ T3871] kernel msg: ebtables bug: please report to author: bad policy
13:24:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  796.294038][ T3868] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  796.382532][ T3868] PF_BRIDGE: br_mdb_parse() with invalid attr
[  796.406663][ T3876] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:04 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  796.436333][ T3876] PF_BRIDGE: br_mdb_parse() with invalid attr
[  796.473501][ T3883] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:04 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  796.476917][ T3877] kvm: pic: single mode not supported
[  796.481581][ T3877] kvm: pic: level sensitive irq not supported
[  796.497266][ T3883] kvm: pic: level sensitive irq not supported
[  796.504991][ T3883] PF_BRIDGE: br_mdb_parse() with invalid attr
[  796.529942][ T3888] kernel msg: ebtables bug: please report to author: bad policy
13:24:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  796.553234][ T3887] kvm: pic: single mode not supported
[  796.563733][ T3887] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  796.612939][ T3887] PF_BRIDGE: br_mdb_parse() with invalid attr
[  796.626782][ T3892] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  796.645520][ T3892] PF_BRIDGE: br_mdb_parse() with invalid attr
[  796.679842][ T3896] kernel msg: ebtables bug: please report to author: bad policy
[  796.728428][ T3900] kernel msg: ebtables bug: please report to author: bad policy
13:24:05 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7)

13:24:05 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x400000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd91, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000700)={{0x0, 0x0, 0x2, 0x191, 0xee, 0x6, 0x22, 0x1}, "5f817189f4d3b0b1a62787d24e8ff335fd567a4d83c2a28f17f34c6d539ce3f5e6614054af7e193a89bcd5b091f5a70eb025a2653fc2640c89b0dbc58b153d3389c21bbb1589a7b8b5ade2d89175ac", [[], [], []]}, 0x36f)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4(0xffffffffffffff9c, &(0x7f0000000580)=@xdp={0x2c, 0x0, <r3=>0x0}, &(0x7f0000000600)=0x80, 0x80000)
r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x110013, r4, 0x0)
r5 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000640)={{0x3, @default}, [@default, @remote, @remote, @remote, @bcast, @remote, @rose, @null]}, &(0x7f00000006c0)=0x48)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'tunl0\x00B\xb5\xab=\x00\x00\x00\xee\x00', r3})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

13:24:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8)

[  796.940821][ T3910] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  796.980820][ T3910] PF_BRIDGE: br_mdb_parse() with invalid attr
[  797.010113][ T3911] PF_BRIDGE: br_mdb_parse() with invalid attr
[  797.026053][ T3915] kernel msg: ebtables bug: please report to author: bad policy
13:24:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:05 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:05 executing program 2:
r0 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x80000)
vmsplice(r0, &(0x7f0000000880)=[{&(0x7f0000000bc0)="2a7d2a8898f9a322f4b2622123e3d55d9656929cf5bb1d8fecbee9ef0f9529c9d0cf581755d756dad3a0f36a53a2e0657b4070c116ef54a233f71c6e9f5edeb4bcaecb36031f0c2942e9160f2ba5a6b0a99f344b5c06dd8e5e5a1dce88cb93a680714f6420f5323e49c8be0bb9c92fb5642a82b26f06a6a44ab5736495b9d0174e980c8e4653d2cd8fd5bbceb043b9a1b8b9df5e03bdaf9e96eeebffe2d7fe9bfc8858d07fa07ded8656bd67c9", 0xad}, {&(0x7f0000000380)="f0fd140bc30da3403a7ae6604ee7bee233221b377d7f918a80ac88082c92b9db1b0cf539c00dccf66ac3f4ef916565804b02158180e9e2f141db3136dc3d5f00a120e6189b403df2ae27e1401483e8bcda74b37dfe6ceb6b6d7f5812650c33310ba2107fde5db0fe264f933763cea5fbe9d68ca4370b2110d5b53f7da75e844da07bf73ed7c55e4affe36bcaa93ee7d23bc863c356664ed514bdecef1f5104053b8efd5b29381c63a4906dd9b2babc99fc17f2d02f52ec3fcfb2099be8c255507b3002440c2ea557e0", 0xc9}, {&(0x7f0000000b00)="70c653e0902ab697f0a29068bf12cbfd0b4d6e7df92629813b980d8d99fb8ae4007613a5290e554dc56d97bd315baaad346ddb8073d4bd4dd138e96656549724d4e37b644c90fb71d598f7dee6e1aecf76f4689c8b198a56ffc8991fc32ad68ff6901e0981cc0fe562e150d34dc5694a226e709e2cdb5860d530da2ee006ce0b27547894", 0xffffffffffffff7f}, {&(0x7f0000000c80)="2225eaa847920b9e5c0c4403a9299e0a8ae32ef0b309fa05cb211dc0e59ab1e870d241df181619308c781e14d2fffcb7935c1dfeeaa4c41f7a5eecd6d48467b62e3a8dfe3fc9d02646ce9dd63554299357970119", 0x54}, {&(0x7f0000000580)="d5d056f75e42969afe2f8365179555cd5a111506b290bc871752f08eb3e88c4de1d8fdb9a21831118c251fd448571b620878f8d3195b23502bce2001ebcd864445c360dc746a5be9012b2bc45c2ca148c25076b00bb589a627bc445e59b253a3fcf5174e293379c8145cf1c239dd420376322f156051ee0444e08fce426b777b3c42935a4543885b30d8ee0b57df7396f76664b25ecf4d3b6ec79d211f27e7a56588400e6d52762b7654e92e005acf5df3", 0xb1}, {&(0x7f0000000640)="bc417563c9452039f56c54354bd8d6f2a45290e7813eacff666e329a848677aa25ed78538d047cc77aa025e2109b506c0da538647d0295719f7ed386b660569022b312e367584e21a69a7f06c3d46dafddeab83ce66ecc4b7e18a39b1d4250af0ac34fcacb0ad293e4f6f305cc8061a93e165f618301287d33ebf4ad5db68d3d364977b65f2ca017121f1c79ad075b639ec2990b22679683c54133d41959814ccb94bb60ef3dba29208664bdab66e0e389bd6f454023d3372f880440e2cba721ea11f5ce18908cf307450ce75b57e13796d01741e4d50a4665320e07e4fc485e575190f7", 0xe4}, {&(0x7f0000000740)="178d927880239161ef965e4660e097d5f26ee5947f6296e3eabca2c051abea29a67bd192b9c449a9f90890d0f0c715d51cabca044c1432ba84c22f6b1b3d8006451e299809297b1696b3a7ba8737cec5a0f1716617333309c10b3a8190c5533270a07f84a291ddb5ce24a8b366068c42f76838a51d63d01871590688c3c7ca9cbcfe8712a9673e5f1094a475383a9e4cb2abfb0f2492449f757c3d1316f4df1e2767d8b01327bca26411bbb12ee49aba9f56dcf042c07ba43198f2ec2d62ba68b0ba75f308a57051df8f622eba9072a3d1be7554bfcfc06d93744545879831b28720bbd5e519e0844a3a1c2382f33864d54b22a81460532bfb93ba21430f04", 0xff}, {&(0x7f0000000ac0)="ec7753cb44d8bdc9b23a922205ef5b442eda3b", 0x13}], 0x8, 0x2)
r1 = syz_open_dev$sndpcmc(&(0x7f00000009c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$void(r0, 0x5450)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00', <r4=>0x0})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000a80))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000a00)={@loopback, @mcast1, @ipv4={[], [], @loopback}, 0x3, 0x3, 0x0, 0x100, 0x2, 0x1450000, r4})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x28, &(0x7f0000000900)={0x0, <r6=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r6, 0x4, 0x18}, 0xc)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  797.080894][ T3916] device nr0
 entered promiscuous mode
[  797.112829][ T3924] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa)

[  797.304302][ T3934] kvm: pic: single mode not supported
[  797.313196][ T3942] kvm: pic: level sensitive irq not supported
[  797.318883][ T3942] kernel msg: ebtables bug: please report to author: bad policy
[  797.330953][ T3934] kvm: pic: level sensitive irq not supported
[  797.340120][ T3944] kvm: pic: single mode not supported
[  797.731185][ T3937] PF_BRIDGE: br_mdb_parse() with invalid attr
[  797.739616][ T3947] kvm: pic: single mode not supported
[  797.751841][ T3931] PF_BRIDGE: br_mdb_parse() with invalid attr
[  797.764957][ T3941] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:06 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-monitor\x00', 0x800, 0x0)
write$binfmt_misc(r1, &(0x7f00000005c0)={'syz1', "dd691fb5885bd2a5817e7df7eda69bfde00547be132d6f49b481332d0d004cd0215db2abb05ac91ec085f8dc22882d05d96b8f195c4cba7bd1f202005e63477d8d22571f63fba4445f733f6f7268189a9562590755468fdf92aa36"}, 0x5f)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0xf, 0x8, 0x800000000000007f, 0x0, 0x4000000038, 0x1, 0x9}, 0x79)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
syz_open_dev$dri(&(0x7f0000000640)='/dev/dri/card#\x00', 0x200000000, 0x10000)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0xffffffffffffbf81, 0x304)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:06 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2)

13:24:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000000)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc)

[  797.889353][ T3955] kernel msg: ebtables bug: please report to author: bad policy
13:24:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  797.945207][ T3953] PF_BRIDGE: br_mdb_parse() with invalid attr
[  797.993157][ T3963] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.017206][ T3966] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.037485][ T3953] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  798.051093][ T3971] kernel msg: ebtables bug: please report to author: bad policy
[  798.059100][ T3969] device nr0
 entered promiscuous mode
13:24:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:06 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3)

[  798.095867][ T3976] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.105736][ T3967] kvm: pic: single mode not supported
[  798.109496][ T3865] kvm: pic: level sensitive irq not supported
13:24:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe)

13:24:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  798.145845][ T3865] kvm: pic: level sensitive irq not supported
[  798.165426][ T3865] kvm: pic: single mode not supported
[  798.234016][ T3988] kernel msg: ebtables bug: please report to author: bad policy
[  798.479899][ T3981] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.500854][ T3991] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:06 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:06 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4)

13:24:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x253, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e23, 0x4, @rand_addr="e422d17dc4d4ac61c3c024c85eca5c57", 0x3}, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x9, [0xfffffffffffffffa, 0x401, 0x0, 0x0, 0x7, 0x5, 0x400, 0x3]}, 0x5c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf)

[  798.639806][ T4006] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.647941][ T4007] kernel msg: ebtables bug: please report to author: bad policy
[  798.663088][ T4000] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.684166][ T4000] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x10)

13:24:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  798.698192][ T4006] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:07 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5)

[  798.767259][ T4011] kvm: pic: single mode not supported
[  798.769401][ T4011] kvm: pic: level sensitive irq not supported
[  798.775665][ T4012] kvm: pic: level sensitive irq not supported
[  798.786690][ T4012] device nr0
 entered promiscuous mode
[  798.842127][ T4021] kernel msg: ebtables bug: please report to author: bad policy
[  798.843261][ T4018] kvm: pic: single mode not supported
[  798.849852][ T4018] PF_BRIDGE: br_mdb_parse() with invalid attr
[  798.870007][ T4028] kernel msg: ebtables bug: please report to author: bad policy
13:24:07 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6)

[  798.890086][ T4023] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:07 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x48)

[  799.264369][ T4032] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.271453][ T4037] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.281314][ T4032] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:07 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0x80000000, 0x9, 0x5}, 0x10)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r3 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x0, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000000)={0x9, 0x3, 0x10001, 0x9, '\x00', 0x4})
connect$llc(r3, &(0x7f0000000040)={0x1a, 0x313, 0x8, 0x95e, 0x7ae, 0x6}, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7802003}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:07 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7)

13:24:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:07 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c)

13:24:07 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8)

13:24:07 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x60)

[  799.399740][ T4052] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.424921][ T4053] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  799.472876][ T4055] kernel msg: ebtables bug: please report to author: bad policy
[  799.495711][ T4061] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:07 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa)

[  799.534378][ T4049] kvm: pic: single mode not supported
[  799.548929][ T4064] kvm: pic: level sensitive irq not supported
[  799.563644][ T4064] device nr0
 entered promiscuous mode
[  799.575262][ T3865] kvm: pic: level sensitive irq not supported
[  799.597349][ T4063] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.605949][ T4068] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.625881][ T4070] kernel msg: ebtables bug: please report to author: bad policy
13:24:07 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x68)

[  799.655216][ T4078] kernel msg: ebtables bug: please report to author: bad policy
[  799.896909][ T4077] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.908528][ T4084] PF_BRIDGE: br_mdb_parse() with invalid attr
[  799.914967][ T4077] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:08 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d54d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b285728265b4955715dd721e90400b713d5d93648cedbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c462878c0673bdf75b89f75e4a314dac44ede04428fafb864759325da7f117c73570a6566c672603400f0f28100000000000000da0e73b5e6b4b4f3233591e813e54a00000000000000000000000000"], 0xd3)

13:24:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c)

[  799.981930][ T4092] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.002437][ T4093] kernel msg: ebtables bug: please report to author: bad policy
13:24:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:08 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc)

13:24:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x74)

13:24:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  800.027118][ T4096] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.035881][ T4100] kernel msg: ebtables bug: please report to author: bad policy
[  800.097003][ T4094] device nr0
 entered promiscuous mode
13:24:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  800.165141][ T4108] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.175259][ T4112] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.191916][ T4115] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.202515][ T4116] kernel msg: ebtables bug: please report to author: bad policy
13:24:08 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe)

[  800.252154][ T4125] kernel msg: ebtables bug: please report to author: bad policy
[  800.266254][    C0] net_ratelimit: 30 callbacks suppressed
[  800.266260][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  800.277687][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:24:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  800.432767][ T4115] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.445243][ T4127] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.469412][ T4130] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:08 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x80000001, 0x2000)
setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000080)=0x21, 0x4)

13:24:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a)

13:24:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x400982)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:08 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf)

13:24:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  800.513342][ T4134] kernel msg: ebtables bug: please report to author: bad policy
[  800.546492][ T4137] kernel msg: ebtables bug: please report to author: bad policy
13:24:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  800.581948][ T4143] PF_BRIDGE: br_mdb_parse() with invalid attr
[  800.618805][ T4150] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0)

13:24:08 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x10)

13:24:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  800.669775][ T4154] kernel msg: ebtables bug: please report to author: bad policy
[  800.685570][ T4156] device nr0
 entered promiscuous mode
[  800.707072][ T4159] kernel msg: ebtables bug: please report to author: bad policy
13:24:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  800.870628][ T4173] kernel msg: ebtables bug: please report to author: bad policy
13:24:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x202000)
ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  801.100716][ T4171] __nla_parse: 39 callbacks suppressed
[  801.100725][ T4171] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  801.116283][ T4171] PF_BRIDGE: br_mdb_parse() with invalid attr
[  801.125822][ T4170] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  801.136081][ T4170] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  801.146272][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  801.152027][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  801.157852][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  801.163621][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  801.169435][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  801.175182][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  801.186451][ T4169] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  801.229072][ T4169] PF_BRIDGE: br_mdb_parse() with invalid attr
[  801.236283][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  801.242129][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  801.257324][ T4172] kernel msg: ebtables bug: please report to author: bad policy
[  801.257673][ T4182] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:09 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x14)

13:24:09 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x48)

13:24:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x300)

[  801.315277][ T4182] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  801.395758][ T4192] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:09 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={<r2=>0x0, 0x9}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x6}, 0xc)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xfffffffffffffff8)

[  801.444632][ T4192] PF_BRIDGE: br_mdb_parse() with invalid attr
[  801.464476][ T4193] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  801.481649][ T4203] kernel msg: ebtables bug: please report to author: bad policy
13:24:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x450)

[  801.496761][ T4193] PF_BRIDGE: br_mdb_parse() with invalid attr
[  801.513774][ T4207] kernel msg: ebtables bug: please report to author: bad policy
13:24:09 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c)

[  801.544539][ T4201] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  801.576300][ T4201] PF_BRIDGE: br_mdb_parse() with invalid attr
[  801.585216][ T4204] pic_ioport_write: 6 callbacks suppressed
13:24:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  801.585221][ T4197] kvm: pic: single mode not supported
[  801.592455][ T4197] device nr0
 entered promiscuous mode
[  801.605122][ T4213] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  801.618408][ T4204] pic_ioport_write: 6 callbacks suppressed
[  801.618412][ T4204] kvm: pic: level sensitive irq not supported
[  801.619218][ T4213] kvm: pic: level sensitive irq not supported
[  801.625489][ T4213] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x500)

[  801.684772][ T4216] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  801.698034][ T4216] kvm: pic: single mode not supported
[  801.714603][ T4216] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:10 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x60)

[  801.743635][ T4224] kernel msg: ebtables bug: please report to author: bad policy
[  802.001643][ T4204] kvm: pic: single mode not supported
[  802.007666][ T4204] kvm: pic: level sensitive irq not supported
[  802.036540][ T4223] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  802.047395][ T4233] kernel msg: ebtables bug: please report to author: bad policy
[  802.052440][ T4223] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.061684][ T4228] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.074722][ T4231] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x47000, 0x4)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200000, 0x0)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000340))
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b969d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d936443f96fa7f2516027f18329c9b9765b7c4628cda033eade49188075e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a7018a0f953a1d2f7d069cf45ed2399319979f8b31ce3c9726a1f86d9522649d2e17bfad0d04a14306204a8c9644a4beca45b35df07d824c06c"], 0xd3)

13:24:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x3, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:10 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x600)

13:24:10 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x68)

13:24:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  802.175589][ T4241] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:10 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x700)

[  802.238615][ T4246] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.269696][ T4251] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.279794][ T4250] kernel msg: ebtables bug: please report to author: bad policy
13:24:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:10 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c)

13:24:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  802.298967][ T4239] kvm: pic: single mode not supported
[  802.302567][ T3865] kvm: pic: level sensitive irq not supported
[  802.318582][ T3865] kvm: pic: level sensitive irq not supported
[  802.329619][ T4256] kvm: pic: single mode not supported
[  802.335642][ T4256] device nr0
 entered promiscuous mode
[  802.427758][ T4268] kernel msg: ebtables bug: please report to author: bad policy
[  802.567437][ T4271] kvm: pic: single mode not supported
[  802.569517][ T4237] kvm: pic: level sensitive irq not supported
[  802.593357][ T4271] kvm: pic: level sensitive irq not supported
[  802.596979][ T4237] kvm: pic: single mode not supported
13:24:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
chmod(&(0x7f0000000000)='./file0\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:10 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x74)

[  802.657753][ T4257] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.664687][ T4265] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.672216][ T4272] kernel msg: ebtables bug: please report to author: bad policy
[  802.686518][ T4267] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:11 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa00)

13:24:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  802.786015][ T3865] kvm: pic: single mode not supported
[  802.792999][ T4275] kvm: pic: level sensitive irq not supported
[  802.794076][ T3865] kvm: pic: level sensitive irq not supported
[  802.844374][ T4284] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.862467][ T4287] kvm: pic: single mode not supported
[  802.869434][ T4287] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc00)

13:24:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  802.896608][ T4290] PF_BRIDGE: br_mdb_parse() with invalid attr
[  802.897849][ T4282] kernel msg: ebtables bug: please report to author: bad policy
[  802.920403][ T4293] kernel msg: ebtables bug: please report to author: bad policy
13:24:11 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a)

13:24:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  802.961886][ T4291] device nr0
 entered promiscuous mode
[  803.018116][ T4305] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.023285][ T4300] kernel msg: ebtables bug: please report to author: bad policy
13:24:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe00)

[  803.067494][ T4313] kernel msg: ebtables bug: please report to author: bad policy
[  803.206833][ T4322] kernel msg: ebtables bug: please report to author: bad policy
13:24:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x5, 0x5, 0x6, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa5a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x632}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x880)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:24:11 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0)

13:24:11 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
r2 = socket$kcm(0x29, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x100000001, 0x2, 0x6, 0x20, 0x0, 0x8, 0x10000, 0x8, 0x6, 0x52b000000000000, 0x2, 0xacc, 0x9, 0x39, 0x101, 0x8, 0x100, 0x5, 0x0, 0x7, 0x9d, 0x1fca, 0xffffffff, 0x7, 0x7fff, 0x3f, 0x80000001, 0x4, 0x8, 0x709aed42, 0x81, 0x9, 0x7fffffff, 0x0, 0x7, 0xf838, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x4}, 0x10000, 0x400, 0x5, 0x9, 0x10001, 0xd6}, r2, 0x3, r1, 0x3)

13:24:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  803.344389][ T4308] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.351477][ T4310] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.367540][ T4319] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.380238][ T4322] kernel msg: ebtables bug: please report to author: bad policy
13:24:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf00)

[  803.485372][ T4338] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:11 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x300)

13:24:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  803.526729][ T4337] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.549968][ T4344] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.600892][ T4351] kernel msg: ebtables bug: please report to author: bad policy
[  803.607673][ T4344] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000)

[  803.644857][ T4356] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.654873][ T4357] kernel msg: ebtables bug: please report to author: bad policy
13:24:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast1}, &(0x7f0000000040)=0xc)

13:24:11 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
mq_timedsend(r0, &(0x7f0000000040)="fbfb186911b34dfeac891a35831d6ef9c5979acd9293404374ff0f9f5a8fbae98757d4d622a04a7f5a7bead3b345fa7dd852be5019bbc410c06a7bc23c26e9ecc98be87b8d5cb7bcf2492484d985820cb95f6d9856d94021719c98dc2e6f92cb79796bf54c97575a057fc9030daf434bb2fc75c025639a8c83e988ac8f632a5c24eef09017614655", 0x88, 0x43, &(0x7f0000000440)={0x77359400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd5945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000480)=0x7, 0x4)

13:24:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  803.685444][ T4359] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:12 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3c4)

[  803.793145][ T4367] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.831902][ T4372] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f00)

[  803.848794][ T4374] kvm: pic: single mode not supported
[  803.853668][ T4374] PF_BRIDGE: br_mdb_parse() with invalid attr
[  803.874851][ T3865] kvm: pic: level sensitive irq not supported
[  803.912829][ T4378] device nr0
 entered promiscuous mode
13:24:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:12 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x500)

[  803.956474][ T4379] kernel msg: ebtables bug: please report to author: bad policy
[  804.037090][ T4392] kernel msg: ebtables bug: please report to author: bad policy
13:24:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x108, 0x0, 0x0, 0x1e4, 0x1ce, 0x9, 0x391, 0x9}, "b09038090dba3e44196b5f0bc7e2c417849cf910df", [[], [], []]}, 0x335)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=<r2=>0x0)
ptrace$getregs(0xe, r2, 0x80, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'sit0\x00\x00\x80\x00\x00\x00\x01\xe4\x00\x00\x00\x02', @ifru_data=&(0x7f0000000000)="683d031be249b5275893595eb41a82f801416132e97573e2053a823755484509"})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000)

[  804.296251][ T4382] PF_BRIDGE: br_mdb_parse() with invalid attr
[  804.302543][ T4388] PF_BRIDGE: br_mdb_parse() with invalid attr
[  804.316610][ T4390] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x1000020, {0x77359400}, {0x3, 0x1, 0x40, 0x2, 0x6, 0x4, "cc36aa9f"}, 0x7, 0x3, @planes=&(0x7f0000000040)={0x4, 0xcee, @userptr=0x9, 0x1}, 0x4})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xfd, "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"}, &(0x7f0000000600)=0x105)
r2 = getpgrp(0xffffffffffffffff)
write$P9_RGETLOCK(r0, &(0x7f0000000640)={0x1c3, 0x37, 0x1, {0x0, 0x9, 0x5, r2, 0x1a5, 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}}, 0x1c3)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:12 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x600)

13:24:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  804.418669][ T4405] kernel msg: ebtables bug: please report to author: bad policy
13:24:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:12 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x700)

[  804.473330][ T4412] PF_BRIDGE: br_mdb_parse() with invalid attr
[  804.493288][ T4411] PF_BRIDGE: br_mdb_parse() with invalid attr
[  804.500238][ T4414] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4800)

[  804.570071][ T4418] kernel msg: ebtables bug: please report to author: bad policy
[  804.583373][ T4421] device nr0
 entered promiscuous mode
[  804.605092][ T4425] kernel msg: ebtables bug: please report to author: bad policy
13:24:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  804.619185][ T4422] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:13 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa00)

[  804.807936][ T4439] kernel msg: ebtables bug: please report to author: bad policy
13:24:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/116)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x9)

[  804.960329][ T4430] PF_BRIDGE: br_mdb_parse() with invalid attr
[  804.967247][ T4434] PF_BRIDGE: br_mdb_parse() with invalid attr
[  804.984803][ T4438] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c00)

13:24:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:13 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc00)

[  805.057912][ T4445] kernel msg: ebtables bug: please report to author: bad policy
[  805.068472][ T4447] kernel msg: ebtables bug: please report to author: bad policy
13:24:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  805.148210][ T4458] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.176711][ T4460] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.192530][ T4459] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  805.200599][ T4459] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.229492][ T4460] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:13 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe00)

[  805.267131][ T4462] device nr0
 entered promiscuous mode
[  805.301935][ T4467] kernel msg: ebtables bug: please report to author: bad policy
[  805.309745][    C0] net_ratelimit: 16 callbacks suppressed
13:24:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5004)

13:24:13 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
semget$private(0x0, 0x7, 0x200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0xd3bf, 0x20000800, 0xffffffffffffffff, 0x3, 0x7fff, 0x1, 0x3, 0x8001, 0x1, 0x7fffffff}, 0x10)
msgget$private(0x0, 0x10024)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0x46c, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x1, 0x2)

[  805.309753][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  805.309809][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  805.309938][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  805.310021][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  805.310104][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  805.310149][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  805.386275][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  805.392051][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  805.448981][ T4483] kernel msg: ebtables bug: please report to author: bad policy
13:24:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x641, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0xfffffffffffff001, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000804}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x731, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x800}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x810)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  805.611917][ T4473] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.618405][ T4478] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.624535][ T4477] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5865)

13:24:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  805.653326][ T4473] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
setrlimit(0x2, &(0x7f0000000000)={0x5, 0x8e6})
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:13 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf00)

13:24:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  805.764773][ T4499] kernel msg: ebtables bug: please report to author: bad policy
13:24:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000)

13:24:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  805.826105][ T4506] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.848834][ T4507] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.903214][ T4512] kernel msg: ebtables bug: please report to author: bad policy
[  805.913831][ T4515] device nr0
 entered promiscuous mode
[  805.938933][ T4505] mmap: syz-executor5 (4505): VmData 18677760 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data.
13:24:14 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000)

13:24:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6558)

[  805.953171][ T4516] PF_BRIDGE: br_mdb_parse() with invalid attr
[  805.991584][ T4519] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.026277][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  806.032070][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  806.062500][ T4525] kernel msg: ebtables bug: please report to author: bad policy
[  806.070353][ T4527] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.085076][ T4530] kernel msg: ebtables bug: please report to author: bad policy
13:24:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400, 0x0)
getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000003c0)=""/35, &(0x7f0000000400)=0x23)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)

13:24:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  806.386601][ T4532] __nla_parse: 48 callbacks suppressed
[  806.386610][ T4532] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  806.413004][ T4544] kernel msg: ebtables bug: please report to author: bad policy
[  806.436363][ T4532] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.442480][ T4527] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  806.460120][ T4527] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.470784][ T4539] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  806.483207][ T4539] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001840)='/dev/vga_arbiter\x00', 0x1, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000001880)=0x3, 0x4)
close(r0)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001700)='/dev/null\x00', 0x40000, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001740)=0x7, 0x4)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001680)='/dev/dlm-control\x00', 0x10100, 0x0)
io_setup(0x1, &(0x7f0000000000)=<r4=>0x0)
r5 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x28, 0x80840)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x20000, 0x0)
r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x101000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000001780)={0x4, 0x6, 0x1, 'queue0\x00'})
ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000016c0)=0xfffffffffffffffa)
r8 = openat$null(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/null\x00', 0x2, 0x0)
io_submit(r4, 0x4, &(0x7f0000001640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x100000001, r1, &(0x7f0000000040)="164eb1c2a40ca838c3f61c640cf48d619693053ede7a636c490b8ce5963869e82693e631669a6d45884721c53b158179643343d4fccb6da72837d7d61a1ddabbb4c25efcb1e80445dedbdbbd3bca86d3174cae1eec17472a93aefcf365aa47162b68b33dd09c13", 0x67, 0x3ff, 0x0, 0x2, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000380)="3ff8483d0e62ef9279142ff26dc92b55e9ee97407552f46d8f857e85011dabcfe263b906a510be8d5d33811208f107d21e70bb370fff67fb879ae40320ae13431e9dbf6895de6cfe8cc6e908470009000a6e571f627270b382bb5749cb265c942b3c25dd57dccb6dc1bcd647dd4e70bafe181c88ad8d5e2fa9986e923550aa65fd060debba1dd77da69a735a2b6b88b46af8ba097694cacc0454dd018bce0c69bfe9e61368f561a726266c04474f0206", 0xb0, 0x10000, 0x0, 0x2, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000004c0)="429ebbf77402980f8940f77afab4e044da88ce6d33d33f8abcfdd46c38eaf03cdc941da0a189606c5724949ecd98b4279639b8d1fd53dad17cc13ba6596b98fb301741b6bb9d778d46d0215b8d0ae75b7cd6ed115baddc89bdeda900ba48a4c2308886dc1758", 0x66, 0x7, 0x0, 0x2, r7}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0xc1, r0, &(0x7f00000005c0)="8c6d3a2c73e332c60c9ed45408ff1aa9cefb9be39681682e99b0f6946382ea1af03ec69f470fc2d5faf74ca5de49f0984a45f01d9f1177de91afc770434ca28e6191fd5b146112d06ee591f1636471fd64c214d1d3b9648af0bafcaa54a8e69d560d69af88c16daa18cd56af1281bbe2553847df1208822062ec7ebf2bb9c5bb226d0f664d2310d02ac54edea568327ccfc93f9cc0eff6c553ec02b008d00af763260c430e040d169849dffe9d3b49719d036f7a8ad47ead6a5005801c3ff218a754eaa24cd142424742aa6af96d14a0aebb53842ccfb03e9d7d06a04a112d67ed6205e48e0a87dff0b5bd27981eab45546b7f59453c0bbc1dab60743a6443e39ebee80a40c38723b096d65623bf3ad7a024aeb07f6850c24c8a24d572b3cffc0c870240f4550ec6611ac3ff856b55088bac75d69eaf0a4a70dffb6d54f28c0f360aae85fc0c0f03a47ab70f714c4dacfdb9b05fce8415958bc52f5c17bff89d3989a06bae9e272647c702daf8c562e4b67296163ce7f1164287608b00bce6b8e9632401fdea8629bad647a92bb46e2fb3dd7686fa18f0142408c6daadb2d2f166b5dda79222971cecc0f14aff0bd6169eafc630a230b6c41e9699bcacd659bec260b16c091ed5d498243ee0ca74f5161b81bc777ab313e1fd3eb7ac0208f6559729b6076570aa380d0ab0d9dfd4cd2b3c5a9bf0d4cae71cfc905647870576d0daf338180d6dd34474efa8b34e0be1041f441753a33bf49e65675273ceb0060bf9fcb2b897dae426b05de5d1b1fb71bda60d424ae5b685964c3e311b4746f631d8337e6fc2942a9471c6360f00f89702ba31e88379a5a776e78dd44cf35ffeda1a38e62442014b21335f19375c3268c699d46d36ec16cdc0d63e5c655ce2e053227c11dd25ffbceb0e8e2d3ed4f05531fed980c31374c817d982468bf5cd42d0c1b1388ae80de85efab5f9293e1faf36b47a87b160f7ad88d7e96a46f2e6a82c24075f4ff110dacf927546ac3e68b9aef70a40c3758c3e38c117e3699a903017832be80a9a8a833ea64c1d5c153485c61ed6c676f75c36fe2510bbb9aaeacc3151489da9f5e1e18065dc8ef483d17614d34a6ec2ec8c1b3d94796fc4f24124885909e66324e57d3be10fd14be1e251b5c64d81df88481882a4b6fd30e2df625f1fabf1d0556c96764c0a65ca3af38c4b9d588cc4accd50483fd13a707343dc35c1a33c284600c9570dbee4f80b2e379ffec8e8658c93c397ab58358beb2b2f754e9b15618cfbdc2fdb9a3ee1d0b1eb6b009752b08d304a2ccb0afc813061008b3bac5e7cd023786c919191b7d8427940897111070ffda27423291211e936bce9c054e63550881df54fd9c3620c55ca5f9fba1e9b36e2271c56f20046692420a2121b0c3eadfbb5f90f09c00e1d08bfe3f4fab1e3228b9fa7476d26cb0fe826eb7bfb7e59988e7923be165abbc480016ae0187840daaba5ff17fe993bcbdc90397584b677e0c260b461d2593a39e8573f0a1581611638c67b7a98bcd354d837e9de7c55e6503281258d5490dd04b00b9eb9ba9cc59b3c899306a351edcfb1c3673ed5709a317f11c437e884897b5548fc79d8f6df633b9e2ebe5f31b2a91239319bb181803f71ba73f59129e7865ce8d58391e6fa181192286d0db68628c7e3c39e7e071544b7c5bbf30119fc7ac864bbbd242fd82277995ffa66dd8517d71d9378709554085a1ed6d43d616e4452fd55be2d8bd34b1d48f433ab3f2045eca9eddbb198439bf3ce35ab8431d537be551f7b93df1fb276128f7c5595b5db60d881952d8599f00be9995d409664eabf1fda6602acdf504616500d295c4ca16dad25723f686a51b47a37755dabd7a3848b8743b6482b031ffb22cb453cf4ca6900db6bf21f1beb9a766dc897f4d208da9e56c0a5f34c438630a635480d3ac7d0e15de7576491a77cbdee709597d5bf46c596b1ad985d264cbda63da7ad77cb9fdda106603c1bc4e1777f3e90ab1395fac7007e1c9009c958f35e2af2c20cc7e9bb088174623b67ae88de33d3d7f079b512801c2b43b3e294ff058c2e718d4057fd255ef94c76d9ebcfa61ede5ee9b44e761b5c61d522e7ccf2ca2e09c94c9a73c84cf1d38f17ce284d248e718d10d13057a9852e612574e620993fa7056137374a91cbda10af422ae3a4200e0d6df855a162f2a6359496937f0dc26f52809ba6a8df2f4c37fd676d3b6629d08b68a16bcc4de090db9f4d78d1d12a75a314fcc4279ea24ff4f626b9190a2b8b535afc8a4df5d61cd542a78a41bddaee6204ba2fc619523ffe8bdbbcaaeebd9004d2bbc83bc27660983e3c4c7cd4ed09d162b24f7f3b1b6824792087001e7897e1e76022dfe8b787c153538b5df118fa6300ebcde4a67cd403e03b4a7e80b3bbd0c6bcd28874c21d3afd78f0418e8284c0a7a23c1c51558cc57432f35837ed11b7ede2895377fe55d8b0b2781a8e06509107fbed8012ccdee21593a140e75c57f150a883494bddd7cea7296051bb3145f7b5d7b5f4f6288c43a6dd39a1139a59a480299bf308b5fbb33226dc8add0afe93254515e919d288fa3defb569534b23de96d298fc660cbb20831ab0626e1268f1d1554b58a7ff78d377921bad7c555b4bdbd351e3a231816ea66c39489560c0412fbbd50be2235bb5c64e90239ffe71534dc3d90a2d1cfe1e4ed2f20cb7171adca53f68eead02decae9f3b784f13198e174e73ed7c3f1649327981ba9cb63b58bab5060fe4adad7a3adedcaf925890ccc6cdb8923a54b6f2146666cf1b4c9c1f698979e2f6fcc27afe17a35deb124195a7fee67d3cefeeeeaecc1f09996de9b89838dc02a59d83b709d9229f8581eb2632602c3edff2f5de7ab6e87006ada1e64b83a638bcabf40133556b13f848e0935716bea3510216b3f253add3e2e410ce6e4d727c1510102728d1ef683a8bc69e84774bb31457ba8abe209e280985d1470780a9be4ee399cd2eeac68d4f1e0a079c301adf4ded6619e485db2b5ed245bbd82131ee3af7d4130b1d150dd69a36e2e3a845c37fe8958f04c59cd9ee60e51f1eef36bb8397a54fc86bc0d593688a3837e110bb6ce3ddd7d1761c489ae67d5adde380edc7a12e55abae0b225d557b70f88369e55d467b01a4a372f88d314ec11869ba2a375e44afbfd03115aae44cd93b161d361a5cf6465ec2df70accbbf57c0ccf6ea3ef3622670a73c20e122ebf82e9a66da8e1e09a8fc329f01a105282b24ef3e7696ad3333d23f6ec08b326abe5208bc2d84ee8fa3e8c269740c1094eb0d7ae873b8b9de7e0721993142c40f9fac96d2b9fc0a6dab32405398489f84e71e335f4cefe235dbe3e8349c9dcf04f6418fb53e6c2c60743fc4ffd230536d8555078f6a31c6a1a077c81ffc65046c8dce61e062698aa3174578d5c2de767379374506d760a878395df01c321e90aece8c487f0d1c5f49ad816361f7c6b9f7974d8c96ab3b547115510330f41de0ab2b1802f1cb10dfb818cc7f32947859698e7ca5e428178301c7668da5bce86446739d460a5cfc0740398cdef0fc872c92173d21a4f8063849a4d59a3b2e93c659d6a644aa6319454ca4a00251d8e72c7ba6bd34aa4b883b883477d8e2216a41d1fee8ed8178db5daf579a48fe7a0d2741c437cbfba32a57598dbb8c1054965db63ce9e3f82553a7a87d3a262b329f2c7ca7c8789988477fc1777454dfe91a23b5c7474a723f4fd5b0b092cc683b4a4fb54079e7c871ea603d93d9aad8e82b10e6c49c13aae07c587aa404159bf2e085d2dadb30ee058279b1cbe924e1005ea51507f083081b3f1b332659fc2815b7ffd7a65f2606cde0b61c788847f0a105c0b183c7685bd488916e659b2c3e9fc653ac735c49e13cb2f4e2c325e17d192ebf3c5d26b2696400ad12069d0367942ddd836562d4018df4914708955da484551164c9f84ddd01ebe4002b2ae1d2c615011127ba37226204479af842ab24bf2e52ad643a272a0791f33d2ce7fac16f52a902fa58a307b8c71ffd5f27cb5ea96e59f07cda44f20600209db8409b0ccd1055a576f9e0de3718b5de192476471c558b14ab322f4327a65118bdba136680fe425eeaa685c108dc730982fff19ce37da4fe075926154d506a041666431ee4f8b00bf44f848763aa4ac681d59d46dec6f0157f61bdfada1fe024e40c4cbd29afe38c233b4fcfe80d74f7171e9e88c5e4bce62926145462fa413a5c3d882a21046356169b56d29dab2a31d62dab28939432e16ae53cac5ac7660c284bfba45b9fa22873923d99ca0c88e66006b9458624ccac0fbdd1d12ded4e3ec87bf7456b4e5cb8b2569ee918666cf9512e6be5f0b6b03c292abbf24331cc506767853fad0887e11a1a1e4f318aa3caa3ba9da7b9d3a92ca030630ff3b007598a3e28c7e5d5f0612dae8f4d083e59c573428bb990836a2c4bcb9443e77c655a7e1b764f3e48c121d1efdc7acb533e9580869c34c0c2c03137c8380e9c567bdaa3dbfe6b9a0abf7925d344d93f94b9f7bfa27697b532beecf5e847a9eb1b42c800a7f0cfe5fb4397ede7fb363249d1579948dc35d75d55aad37dbd7f0fbdce2589e386d9d30599fd6010ee964ed327e513f716604531eb27f22a46374ee625ce35fbb9ae0929670dccabc3322ec47921f55d2d0c0300a4aa18f69a48c8d53faf305c2edf0d760c72fb25b4afb1d3f9b6c7106ca84b3c0fd0701ab27371a9d4c2848d6cfbac54633388731be8b538249f8648e49e6e5c44d517dc73724fde9caa57b71221c587571e9f7441e0f495070feed7e2bd2cf73aca597b8b9128ec4e74e0652551dea1a491e682fe06582f175dad1940256d80e6356bf909d41cbe906b7d8b57fb9779c5ba99eadfe0c5bc53daf27f2a97d9e40b3c437ad55ae9503262385aaf43b80ae825e6d6b67ec2a0e96bec86ef1d25711feeda1d2b22ec93629f01acbf5d2419ac4051693eb65b82c741258b706a4787f3914696363be6b8d73e4b5715fb68f53def7776b1a9e199bca7a3d3429874f93ed66f7a96ad421ef96d3e321a56abe68cd7e568c672564ddc56cddee4e4b3ca6c35991f8a279a031e55e44f3a8dbcbe92166bc6fd401e9bebbaf03fa6009fef35ce18c51f66a01b445cdb71fd402e0074c87745663d8ec8b50cb100fc9846922356dc71456fde42c3df8be62d5e0b79bfed20f85493f785e5afa34c4b16089eedddbc92753148248f7eb53258ed3df572004f7a383b6eb08944161b2301cf40a665fafceac3a0dd05de092b47107dda4538dad2b7dd993325a5b4b4044fc7223733e18b1a9deb280b578762c61d65f6a2f1ceb697f6761b38f3159de1702ff44ae4188967cb1cc76d7b1d13f70a74f6f129749b6f75d090a096d0c1fedb2e17e223c7bf109cb52451cd4fa4a33883b8912cce6ab0d8f7236692b61a77e1b40181504592d7d6301473663a44a8b7fa5dc7dc4687a5c8fab1f8225d0abf7fcf97e68440a20e3c36346a21a6b9edbf2a06ed0269ebf74e3b294d39aa087df040d2aa9dcf019e3f12ce77f558efdffa1e53052e8c81110743d7f99aefe89e688a0b5a2007d36bc64dcc587a2d0047f76a6bc26640d88b3a797cb405c7a9d0b73982da99dcc2fc881a0b5ad0fb283cf899165f35ea3cedef58b7ece4a5ebd86407b894aea45663e0c9d7a8160ada05e2f16bb41db6df8172cd0275a870c79833ae5c2c0eeac89aa4b51676a67e7d9988f9f5bee4dee87a2d7760926fea47bbc0fe702344a449e658c60302d8e18005a6d6164dc90a7e2de34dae9", 0x1000, 0x7, 0x0, 0x0, r8}])
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0xffffff1d)

13:24:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@multicast1, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x3c, 0x0, r3}, {0x6924, 0xd6e, 0xfffffffffffffbff, 0x6, 0xfff, 0x8, 0x7, 0x8}, {0x8a, 0x4, 0x0, 0x100000001}, 0x35, 0x6e6bb9, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0x3b}, 0xa, @in=@loopback, 0x34ff, 0x3, 0x1, 0x1ff, 0x0, 0x8, 0xfffffffffffffff9}}, 0xe8)
personality(0x2000000)
r4 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10001)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f0000000500)="8fc978830df50677b2c744240096000000c744240200000100ff1c24460f01c9c421cd73d8514b0fc76e00b9800000c00f3235010000000f302e2e0fc76b00470f08b933030000b8f877cfe0ba8261b23d0f3048b89af90000000000000f23d00f21f835300000030f23f8", 0x6b}], 0x1, 0x2a, &(0x7f00000005c0), 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40, 0x0)
ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000100)={@bcast, @bcast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

13:24:14 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f00)

[  806.515208][ T4532] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  806.530964][ T4548] kernel msg: ebtables bug: please report to author: bad policy
[  806.545809][ T4532] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6800)

[  806.657803][ T4557] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  806.690198][ T4557] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.703482][ T4560] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  806.723350][ T4560] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.744770][ T4566] kernel msg: ebtables bug: please report to author: bad policy
13:24:15 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000)

13:24:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  806.753643][ T4569] kernel msg: ebtables bug: please report to author: bad policy
[  806.768376][ T4567] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  806.811379][ T4562] pic_ioport_write: 5 callbacks suppressed
[  806.811384][ T3865] kvm: pic: single mode not supported
[  806.833874][ T4562] pic_ioport_write: 5 callbacks suppressed
[  806.833878][ T3865] kvm: pic: level sensitive irq not supported
[  806.857758][ T4567] kvm: pic: level sensitive irq not supported
[  806.858004][ T4567] PF_BRIDGE: br_mdb_parse() with invalid attr
[  806.872955][ T4577] kernel msg: ebtables bug: please report to author: bad policy
[  806.876382][ T4578] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:24:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c00)

13:24:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  806.900429][ T4584] kvm: pic: single mode not supported
[  806.912201][ T4584] kernel msg: ebtables bug: please report to author: bad policy
[  806.991267][ T4578] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:15 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4800)

[  807.038697][ T4586] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  807.057199][ T4586] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.065649][ T4593] kernel msg: ebtables bug: please report to author: bad policy
[  807.089321][ T4590] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  807.112174][ T4590] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.156999][ T4597] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  807.247669][ T4573] kvm: pic: single mode not supported
[  807.250198][ T3865] kvm: pic: level sensitive irq not supported
[  807.269312][ T4605] kernel msg: ebtables bug: please report to author: bad policy
[  807.278683][ T4604] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.308885][ T4573] kvm: pic: level sensitive irq not supported
[  807.312480][ T3865] kvm: pic: single mode not supported
13:24:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x3, 0xb, 0x4, 0x200400, {}, {0x3, 0x0, 0xffff, 0x1, 0x8, 0x8, "97690e3c"}, 0xd216, 0x4, @userptr=0x6, 0x4})
ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000340)=""/255)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000100))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7400)

13:24:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x101400, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:15 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c00)

13:24:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  807.414273][ T4617] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.441099][ T4616] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.453856][ T4620] kernel msg: ebtables bug: please report to author: bad policy
13:24:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:15 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5865)

13:24:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  807.461638][ T4621] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.481017][ T4621] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.536640][ T4627] device nr0
 entered promiscuous mode
13:24:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a00)

[  807.588637][ T4624] kvm: pic: single mode not supported
[  807.590931][ T3865] kvm: pic: level sensitive irq not supported
13:24:15 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000)

[  807.628778][ T4624] kvm: pic: level sensitive irq not supported
[  807.635154][ T4637] kvm: pic: single mode not supported
[  807.653479][ T4637] kernel msg: ebtables bug: please report to author: bad policy
13:24:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x448200, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  807.919856][ T4632] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.930781][ T4639] PF_BRIDGE: br_mdb_parse() with invalid attr
[  807.948824][ T4642] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  807.963645][ T4637] kernel msg: ebtables bug: please report to author: bad policy
13:24:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8100)

13:24:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
semget$private(0x0, 0x1, 0x200)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1053d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864750025da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
r2 = semget$private(0x0, 0x3, 0x40)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
semtimedop(r2, &(0x7f0000000000)=[{0x7, 0x9}, {0x7, 0x80000001, 0x830201a8f31a168a}, {0x0, 0x1, 0x1800}, {0x2, 0x23a1, 0x800}, {0x0, 0x6, 0x1000}, {0x3, 0xe4d9, 0x1800}, {0x5, 0x3ff}], 0x7, &(0x7f0000000080)={r3, r4+10000000})

13:24:16 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6558)

[  808.074109][ T4654] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.127360][ T4656] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.145882][ T4648] kvm: pic: single mode not supported
[  808.150597][ T4660] kvm: pic: level sensitive irq not supported
[  808.160645][ T4660] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf000)

[  808.187301][ T4648] kvm: pic: level sensitive irq not supported
[  808.191248][ T4663] kvm: pic: single mode not supported
13:24:16 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6800)

[  808.281688][ T4667] kernel msg: ebtables bug: please report to author: bad policy
[  808.282338][ T4666] device nr0
 entered promiscuous mode
[  808.317326][ T4674] kernel msg: ebtables bug: please report to author: bad policy
13:24:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  808.340908][ T4677] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.349066][ T4671] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.365933][ T4675] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  808.386594][ T4677] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x34000)

[  808.588163][ T4691] kernel msg: ebtables bug: please report to author: bad policy
13:24:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r3, 0x7, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:16 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c00)

13:24:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  808.776759][ T4688] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.783321][ T4687] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.793873][ T4696] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.811969][ T4696] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc?\x8e\x05T\xf8\xa6\xcf\xc0#-\xd0(G\xae\x89\x99\xa3]1\xda\a\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\x9b\xed\xc5\xb2\xe0)x\"\xad\xec:)<s*\xe7\xa4H/w:\x80ZS\xad\x17$\xc1\xa57\xd6\"3\x9c\x8cG\x0f\xbc\x1e\x1e\xedj\xff\xaf\x9b\xcc\x82n\bB\xbbwt\x16\x93\xbc>\xf4~z\xd9\x90,\xf3\x82{\xf1\x9bE\xba\xa3\xd5\xa7\xa3DX\xa4\x93\xb5h\xa3d\xb4$\x8eK')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d806005754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8e15dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b976537c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a65660272603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a0000000000000000"], 0xd3)

13:24:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x400300)

13:24:17 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7400)

[  808.896008][ T4699] kvm: pic: single mode not supported
[  808.903730][ T3865] kvm: pic: level sensitive irq not supported
[  808.971339][ T4710] PF_BRIDGE: br_mdb_parse() with invalid attr
[  808.981648][ T4711] kvm: pic: level sensitive irq not supported
[  808.994064][ T4711] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  808.994236][ T4712] kvm: pic: single mode not supported
[  809.021050][ T4712] kernel msg: ebtables bug: please report to author: bad policy
[  809.037387][ T4714] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:17 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a00)

13:24:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffff)

[  809.099440][ T4722] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  809.178051][ T4726] kernel msg: ebtables bug: please report to author: bad policy
[  809.221971][ T4731] PF_BRIDGE: br_mdb_parse() with invalid attr
[  809.266876][ T4736] PF_BRIDGE: br_mdb_parse() with invalid attr
[  809.284861][ T4737] kernel msg: ebtables bug: please report to author: bad policy
13:24:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000004000/0x1000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f00000002c0)=""/231)

13:24:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$P9_RREADDIR(r0, &(0x7f0000000000)={0x68, 0x29, 0x1, {0x24, [{{0x20, 0x1, 0x4}, 0x80000001, 0x8001, 0x7, './file0'}, {{0x1, 0x2, 0x8}, 0x7, 0x1, 0x7, './file0'}, {{0x80, 0x0, 0x2}, 0x1, 0xffffffffffffff80, 0x7, './file0'}]}}, 0x68)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x1000000)

13:24:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:17 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8100)

13:24:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  809.592194][ T4752] PF_BRIDGE: br_mdb_parse() with invalid attr
[  809.608557][ T4754] kernel msg: ebtables bug: please report to author: bad policy
[  809.616374][ T4748] PF_BRIDGE: br_mdb_parse() with invalid attr
[  809.627953][ T4759] kernel msg: ebtables bug: please report to author: bad policy
[  809.631218][ T4755] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000000)

13:24:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  809.666638][ T4761] device nr0
 entered promiscuous mode
13:24:18 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc403)

13:24:18 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf000)

[  809.866140][ T4776] kernel msg: ebtables bug: please report to author: bad policy
13:24:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x20e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
readv(r2, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/242, 0xf2}, {}, {&(0x7f00000013c0)=""/191, 0xbf}, {&(0x7f0000001480)=""/157, 0x9d}, {&(0x7f0000001540)=""/199, 0xc7}, {&(0x7f0000001640)=""/183, 0xb7}, {&(0x7f0000001700)=""/94, 0x5e}], 0x8)

[  810.114712][ T4768] PF_BRIDGE: br_mdb_parse() with invalid attr
[  810.141936][ T4769] PF_BRIDGE: br_mdb_parse() with invalid attr
[  810.149953][ T4780] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3000000)

[  810.167440][ T4776] kernel msg: ebtables bug: please report to author: bad policy
13:24:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x402, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={<r3=>0xffffffffffffffff}, 0x111, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000440), 0x3, r3, 0x10, 0x0, @ib={0x1b, 0x0, 0x1, {"ab41f70ea8866ac480fead9fddeba48a"}, 0x10001, 0x6, 0xdb}}}, 0xa0)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x90c, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0))
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)
lseek(r2, 0x0, 0x3)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="7f599464ed6a390de8f640981a15aa081fdeb2d2f9f2f259cbbdc30941f872ac066d4a332a5cbe374bc0d6cd518736fe8f90ced0ef149241538b19e128234f75d087d27c51fa6b45007885010e7e82174bd6450e9340a25a5bc171ea68c30381f28c691854883db2707522777a51fe7d7d7a71893e1fca", 0x77)
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000680))

13:24:18 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x34000)

13:24:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  810.264708][ T4790] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000000)

[  810.365027][ T4799] PF_BRIDGE: br_mdb_parse() with invalid attr
[  810.381739][ T4801] PF_BRIDGE: br_mdb_parse() with invalid attr
[  810.389369][ T4802] kernel msg: ebtables bug: please report to author: bad policy
13:24:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  810.430466][ T4807] device nr0
 entered promiscuous mode
[  810.449048][ T4808] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:18 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x400300)

13:24:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:18 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2)
sendmsg$nfc_llcp(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x27, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x1, "6509d427d32c6e1484329147595f864ded82a982293edff33f2a6c597510b4abb9c93f4b3ad1a9c988b72121996a70739707db71da5657728eed5726e7ba78", 0x3b}, 0x60, &(0x7f0000000040)=[{&(0x7f0000000400)="9211b81dcfb9a0cb7f22eee1a7e35f35770445bb1ba4370812b5de2b0a2466654c6daa6af4c9b2693c5c05e1ad21fd1eb8a2bf123c6952dee9ab5d29fa14261119e157d7a04fdb5214a3b7af55f6db2956d587b61ec12d469a22e903c74b735d9fe953f3124727cede0616c8c94e69f09840a9785d5fc82b1c654f11a3b764a9553f7d8914c1ea3108c54bd21314bc0865a5bcddc44b2eda4a09162c7a3ad843efc4235397da548db63e5580469cbaad39e3197a32d9cba65ce6bb6344c4b9b8f982", 0xc2}], 0x1, &(0x7f0000000500)={0xa8, 0x10c, 0x7ff000000000, "a2e83fe080b49cb9d275f8a6c2827904a0969c05a2fd0bd358e2a07e6a8b112c5aff5b864c70610c62e18a89f0a58be57f65b1086e023ee8c45ae8fd74dd37f707cd315729ab1b1d3618399ee16e52c919897c344a23924c0a9f31346fbedbc8e5ed256c5e6f1854145591b6f341e527686e292094090afc749e723829da05940f7a5f0e4d573bbabf01f256476f10658d1e460cba"}, 0xa8, 0x80}, 0x890)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_ts_info={0x41, 0xfffffffffffff001, 0x4, 0x8, [0x80000001, 0x40, 0x7], 0x8, [0x3, 0x0, 0x5]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000380))
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5000000)

[  810.591989][ T4819] kernel msg: ebtables bug: please report to author: bad policy
[  810.666417][    C0] net_ratelimit: 24 callbacks suppressed
[  810.666449][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  810.677936][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:24:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xcd, 0x1)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000040)={0x101, 0x1, 0x800, 0x0, 0x4})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000003c0)="f36fc4e1fbf0bf492c5d16b9800000c00f3235000400000f30c7442400b4a40000c744240206000000c7442406000000000f011c240f01df66410f38800f650fc76a00660f63b20020000046f4c4e279583ca3"}], 0xaaaaaaaaaaaace8, 0x0, 0x0, 0xfffffffffffffde1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sysinfo(&(0x7f0000000100)=""/59)

13:24:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:19 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffff)

[  810.930191][ T4817] PF_BRIDGE: br_mdb_parse() with invalid attr
[  810.943426][ T4818] PF_BRIDGE: br_mdb_parse() with invalid attr
[  810.950231][ T4825] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:19 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r2 = accept(r1, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100022}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, r3, 0xc2c, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf74800000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000)
write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386909603fb00070e6c26b097aa655e10dd7945610c671b06f2783724da230b96ecd0e61381b60be86b11a4739d1153d5626076c42e80d2d5501954d81b8d5754305533e61d906e336fe43a3f95b6a53fc85732251d8e0788b2857282ea6a822e4c8edf1d3b8265b4955715dd721e90400b713d5d93648cccbbe0cca10f0d8543f96fa7f2516027f18329c9b9765b7c46287cc0673bdf75b89f75e4a314fac44ede04428fafb864759325da7f117c73570a6566c672603400f0f29404fdd3a9c936b3da0e93b5e6b4b4f3233591e813e54a"], 0xd3)

13:24:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:19 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000000)

13:24:19 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x1000000)

13:24:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  811.149148][ T4845] kernel msg: ebtables bug: please report to author: bad policy
[  811.162068][ T4847] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:19 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7000000)

[  811.205563][ T4851] PF_BRIDGE: br_mdb_parse() with invalid attr
[  811.234662][ T4843] device nr0
 entered promiscuous mode
13:24:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  811.486878][ T4861] __nla_parse: 41 callbacks suppressed
[  811.486886][ T4861] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  811.503988][ T4861] PF_BRIDGE: br_mdb_parse() with invalid attr
[  811.527135][ T4863] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  811.546256][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  811.552535][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  811.558379][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  811.564131][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  811.566373][ T4863] PF_BRIDGE: br_mdb_parse() with invalid attr
[  811.569991][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  811.581841][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  811.587934][ T4866] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  811.597115][ T4866] PF_BRIDGE: br_mdb_parse() with invalid attr
[  811.606515][ T4861] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  811.615615][ T4861] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:19 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8000000)

[  811.626359][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  811.632121][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  811.713825][ T4873] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  811.725616][ T4873] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8400, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0xb20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x6f5bd9bd4a756992)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff08)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13:24:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

13:24:20 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000000)

13:24:20 executing program 5:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000005c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x84)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480), 0x200000000000009f, 0x4c00)

13:24:20 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa000000)

[  811.977801][ T4881] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  812.038844][ T4881] PF_BRIDGE: br_mdb_parse() with invalid attr
[  812.045392][ T4883] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  812.055248][ T4883] PF_BRIDGE: br_mdb_parse() with invalid attr
[  812.070096][ T4887] pic_ioport_write: 10 callbacks suppressed
[  812.070101][ T4887] kvm: pic: level sensitive irq not supported
13:24:20 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3000000)

13:24:20 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1be, 0x0)

[  812.071346][ T4889] kvm: pic: level sensitive irq not supported
[  812.074135][ T4889] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  812.110241][ T4887] kvm: pic: level sensitive irq not supported
[  812.112508][ T4889] kvm: pic: level sensitive irq not supported
[  812.116305][ T4889] PF_BRIDGE: br_mdb_parse() with invalid attr
[  812.132478][ T4887] kvm: pic: level sensitive irq not supported
13:24:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x0, 0x0}, 0x0)

[  812.133271][ T3865] kvm: pic: level sensitive irq not supported
[  812.160022][ T4893] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  812.162292][ T3865] kvm: pic: level sensitive irq not supported
13:24:20 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc000000)

[  812.224039][ T4893] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:20 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000000)

[  812.422403][ T4908] kvm: pic: level sensitive irq not supported
[  812.601787][ T4899] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  812.611161][ T4899] PF_BRIDGE: br_mdb_parse() with invalid attr
[  812.618659][ T4903] PF_BRIDGE: br_mdb_parse() with invalid attr
[  812.625739][ T4907] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000040)='tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00', 0xf, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:21 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff87}}, 0x0, 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

13:24:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2)

13:24:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe000000)

13:24:21 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5000000)

13:24:21 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4ffffff, 0x75}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

13:24:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x7)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x10000)

[  812.912438][ T4926] pic_ioport_write: 10 callbacks suppressed
[  812.912443][ T4926] kvm: pic: single mode not supported
[  812.923013][ T4926] kvm: pic: level sensitive irq not supported
[  812.930024][ T4926] kvm: pic: level sensitive irq not supported
[  812.950745][ T3865] kvm: pic: single mode not supported
13:24:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x7)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x10000)

13:24:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000002c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
socket$can_bcm(0x1d, 0x2, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  813.404570][ T4922] PF_BRIDGE: br_mdb_parse() with invalid attr
[  813.411990][ T4924] PF_BRIDGE: br_mdb_parse() with invalid attr
[  813.419260][ T4925] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3)

[  813.459333][ T4932] IPVS: ftp: loaded support on port[0] = 21
13:24:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf000000)

[  813.711370][ T4954] kvm: pic: single mode not supported
[  813.717602][    T7] kvm: pic: single mode not supported
[  813.769406][ T4952] PF_BRIDGE: br_mdb_parse() with invalid attr
[  814.005334][ T4932] chnl_net:caif_netlink_parms(): no params data found
[  814.142143][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.149313][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.157306][ T4932] device bridge_slave_0 entered promiscuous mode
[  814.164614][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.171892][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.179557][ T4932] device bridge_slave_1 entered promiscuous mode
[  814.200176][ T4932] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  814.210045][ T4932] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  814.325324][ T4932] team0: Port device team_slave_0 added
[  814.332312][ T4932] team0: Port device team_slave_1 added
[  814.398283][ T4932] device hsr_slave_0 entered promiscuous mode
[  814.456356][ T4932] device hsr_slave_1 entered promiscuous mode
[  814.640684][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.647784][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  814.655019][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.662141][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state
[  814.790630][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.803619][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  814.811360][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.819200][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.827684][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  814.942884][ T4932] 8021q: adding VLAN 0 to HW filter on device team0
[  814.952753][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  814.961141][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.968207][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state
[  815.078001][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  815.086685][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  815.094888][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.101956][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.109584][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  815.126334][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  815.134610][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  815.143593][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  815.152182][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  815.160822][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  815.169510][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  815.177815][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  815.185834][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  815.193994][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  815.202485][    T7] device bridge_slave_1 left promiscuous mode
[  815.209529][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.267364][    T7] device bridge_slave_0 left promiscuous mode
[  815.273534][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.706279][    C0] net_ratelimit: 16 callbacks suppressed
[  815.706285][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  815.717703][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  815.723454][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  815.729222][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  815.734975][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  815.740813][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  815.786404][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  815.792146][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  816.426353][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  816.432161][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  818.028635][    T7] device hsr_slave_1 left promiscuous mode
[  818.070946][    T7] device hsr_slave_0 left promiscuous mode
[  818.139572][    T7] team0 (unregistering): Port device team_slave_1 removed
[  818.151855][    T7] team0 (unregistering): Port device team_slave_0 removed
[  818.162572][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  818.199316][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  818.288074][    T7] bond0 (unregistering): Released all slaves
[  818.361849][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  818.369939][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  818.393556][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0
13:24:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:26 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000000)

13:24:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4)

13:24:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x10000000)

13:24:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x7)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x10000)

[  818.460412][ T4966] kernel msg: ebtables bug: please report to author: bad policy
[  818.470895][ T4969] kernel msg: ebtables bug: please report to author: bad policy
[  818.538531][ T4976] __nla_parse: 6 callbacks suppressed
[  818.538539][ T4976] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  818.563120][ T4976] PF_BRIDGE: br_mdb_parse() with invalid attr
[  818.577519][ T4980] kernel msg: ebtables bug: please report to author: bad policy
13:24:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x20000000)

13:24:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  818.585219][ T4979] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  818.604212][ T4984] kernel msg: ebtables bug: please report to author: bad policy
[  818.612514][ T4979] PF_BRIDGE: br_mdb_parse() with invalid attr
[  818.642936][ T4974] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:26 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7000000)

[  818.696978][ T4974] PF_BRIDGE: br_mdb_parse() with invalid attr
[  818.728206][ T4989] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  818.774569][ T4989] PF_BRIDGE: br_mdb_parse() with invalid attr
[  818.797174][ T4992] kernel msg: ebtables bug: please report to author: bad policy
13:24:27 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5)

[  818.829795][ T4995] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  818.888649][ T4995] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f000000)

13:24:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6)

13:24:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8000000)

13:24:28 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$EVIOCGMASK(r2, 0x80104592, 0x0)

[  819.855040][ T5013] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  819.864926][ T5013] PF_BRIDGE: br_mdb_parse() with invalid attr
[  819.886584][ T5017] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7)

[  819.900294][ T5017] PF_BRIDGE: br_mdb_parse() with invalid attr
[  819.903717][ T5018] kvm: pic: single mode not supported
[  819.905826][ T5018] pic_ioport_write: 2 callbacks suppressed
[  819.905833][ T5018] kvm: pic: level sensitive irq not supported
[  819.906930][ T3865] kvm: pic: level sensitive irq not supported
[  819.919174][ T5019] kernel msg: ebtables bug: please report to author: bad policy
[  819.940382][ T5016] kvm: pic: single mode not supported
[  819.943704][ T5016] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:24:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x40000000)

13:24:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8)

[  819.979139][ T5016] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="56b4a5f58b00"}, 0x14)
sendmmsg$inet_sctp(r2, &(0x7f0000007080), 0x5d, 0x0)

13:24:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa000000)

[  820.083458][ T5031] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  820.157489][ T5031] PF_BRIDGE: br_mdb_parse() with invalid attr
[  820.166467][ T5036] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  820.189262][ T5036] PF_BRIDGE: br_mdb_parse() with invalid attr
[  820.211717][ T5040] PF_BRIDGE: br_mdb_parse() with invalid attr
[  820.220172][ T5041] kernel msg: ebtables bug: please report to author: bad policy
[  820.237065][ T5045] kernel msg: ebtables bug: please report to author: bad policy
13:24:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa)

13:24:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x48000000)

13:24:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:28 executing program 5:

[  820.377903][ T5053] kvm: pic: single mode not supported
[  820.380286][ T5053] kvm: pic: level sensitive irq not supported
[  820.386756][ T5012] kvm: pic: level sensitive irq not supported
[  820.396134][ T5012] kvm: pic: single mode not supported
13:24:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc000000)

13:24:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = add_key$keyring(&(0x7f0000001900)='keyring\x00', &(0x7f0000001940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r3 = getpgid(0x0)
sched_setparam(r3, &(0x7f0000001a80)=0x2)
keyctl$revoke(0x3, r2)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800)
recvmsg(r5, &(0x7f0000001880)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/65, 0x41}, {&(0x7f0000001680)=""/207, 0xcf}, {&(0x7f0000000100)=""/38, 0x26}], 0x8, &(0x7f0000001800)=""/115, 0x73}, 0x40000000)
ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f00000018c0)={0x544, 0x3da})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000001980)=""/218)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000001ac0)='/dev/usbmon#\x00', 0x7fffffff, 0x400000)
read$alg(r6, &(0x7f0000001b00)=""/78, 0x4e)

[  820.480741][ T5058] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:28 executing program 5:

[  820.537570][ T5064] kernel msg: ebtables bug: please report to author: bad policy
[  820.545263][ T5062] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c000000)

[  820.581688][ T5063] PF_BRIDGE: br_mdb_parse() with invalid attr
[  820.592338][ T5068] kernel msg: ebtables bug: please report to author: bad policy
13:24:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe000000)

13:24:28 executing program 5:

13:24:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc)

13:24:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x50040000)

[  820.621386][ T5065] kvm: pic: single mode not supported
[  820.628453][ T5065] kvm: pic: level sensitive irq not supported
[  820.651831][ T5074] kvm: pic: level sensitive irq not supported
[  820.658592][ T5074] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:29 executing program 5:

[  820.729301][ T5087] kvm: pic: single mode not supported
[  820.808273][ T5087] PF_BRIDGE: br_mdb_parse() with invalid attr
[  820.856411][ T5089] PF_BRIDGE: br_mdb_parse() with invalid attr
[  820.878455][ T5093] kernel msg: ebtables bug: please report to author: bad policy
[  820.894691][ T5091] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x60000000)

[  820.906498][    C0] net_ratelimit: 28 callbacks suppressed
[  820.906543][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  820.918078][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  820.938323][ T5096] kernel msg: ebtables bug: please report to author: bad policy
13:24:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf000000)

13:24:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe)

[  821.073316][ T5102] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.109548][ T5108] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.121537][ T5107] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.149960][ T5107] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.211650][ T5065] kvm: pic: single mode not supported
[  821.213964][ T5065] kvm: pic: level sensitive irq not supported
[  821.220569][ T5065] kvm: pic: level sensitive irq not supported
[  821.229858][ T5055] kvm: pic: single mode not supported
13:24:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:29 executing program 5:

13:24:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf)

13:24:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x65580000)

13:24:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000300), &(0x7f00000002c0)=0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x10000000)

13:24:29 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}}, 0x0, 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

[  821.335728][ T5119] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.366047][ T5115] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x10)

13:24:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x68000000)

[  821.392555][ T5120] kernel msg: ebtables bug: please report to author: bad policy
[  821.421053][ T5129] kernel msg: ebtables bug: please report to author: bad policy
13:24:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x20000000)

13:24:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:29 executing program 5:

13:24:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x48)

[  821.463466][ T5135] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.570320][ T5144] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:29 executing program 5:

[  821.617161][ T5145] kernel msg: ebtables bug: please report to author: bad policy
[  821.625107][ T5149] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.654394][ T5152] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c000000)

[  821.681091][ T5149] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:30 executing program 2:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:30 executing program 5:

13:24:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c)

13:24:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f000000)

13:24:30 executing program 5:

13:24:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  821.826704][ T5166] kernel msg: ebtables bug: please report to author: bad policy
[  821.837303][ T5167] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.844571][ T5173] kernel msg: ebtables bug: please report to author: bad policy
[  821.860826][ T5169] PF_BRIDGE: br_mdb_parse() with invalid attr
[  821.869840][ T5170] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x74000000)

13:24:30 executing program 5:

13:24:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x60)

13:24:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x40000000)

[  821.946270][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  821.952124][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  821.957997][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  821.963767][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  821.969601][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  821.975359][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:24:30 executing program 5:

[  821.997137][ T5178] kernel msg: ebtables bug: please report to author: bad policy
[  822.026293][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  822.032074][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  822.046719][ T5190] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x48000000)

[  822.069456][ T5193] kvm: pic: single mode not supported
[  822.074623][ T5193] PF_BRIDGE: br_mdb_parse() with invalid attr
[  822.107142][ T5189] kvm: pic: level sensitive irq not supported
[  822.108131][ T3865] kvm: pic: level sensitive irq not supported
[  822.122826][ T5194] PF_BRIDGE: br_mdb_parse() with invalid attr
[  822.129775][ T5196] kernel msg: ebtables bug: please report to author: bad policy
[  822.140892][ T3865] kvm: pic: single mode not supported
[  822.199558][ T5200] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x103000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00', <r2=>0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
getresuid(&(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340), &(0x7f0000000380))
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@migrate={0x120, 0x21, 0x8, 0x70bd28, 0x25dfdbfb, {{@in=@multicast2, @in=@remote, 0x4e20, 0x101, 0x4e21, 0x8, 0x2, 0xa0, 0x20, 0x0, 0x0, r5}, 0x6e6bbb, 0x3}, [@policy={0xac, 0x7, {{@in6=@ipv4={[], [], @remote}, @in=@loopback, 0x4e22, 0xff, 0x4e20, 0x1, 0x2, 0x20, 0x80, 0xe, r2, r6}, {0x100000000, 0x1, 0x20000000000000, 0x8, 0x1, 0x1ff, 0x2d91, 0x5}, {0x800, 0x0, 0x9, 0x4}, 0x984f, 0x6e6bbb, 0x1, 0x0, 0x3, 0x1}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd27, 0x4}}, @coaddr={0x14, 0xe, @in=@multicast2}]}, 0x120}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r7 = open(&(0x7f0000000680)='./file0\x00', 0x105241, 0x19)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000040)={'veth1\x00', 0x8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a000000)

13:24:30 executing program 5:

13:24:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x68)

13:24:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c000000)

13:24:30 executing program 5:

[  822.486087][ T5212] PF_BRIDGE: br_mdb_parse() with invalid attr
[  822.501351][ T5213] PF_BRIDGE: br_mdb_parse() with invalid attr
[  822.507976][ T5215] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  822.529426][ T5214] kernel msg: ebtables bug: please report to author: bad policy
13:24:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x60000000)

13:24:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x81000000)

13:24:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c)

13:24:30 executing program 5:

[  822.684686][ T5232] PF_BRIDGE: br_mdb_parse() with invalid attr
[  822.727000][ T5235] kernel msg: ebtables bug: please report to author: bad policy
13:24:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={<r4=>0x0, 0x1}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={r4, 0x10000}, &(0x7f0000000380)=0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x74)

13:24:31 executing program 5:

13:24:31 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x65580000)

13:24:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x88a8ffff)

13:24:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:31 executing program 5:

13:24:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x9effffff)

[  823.011430][ T5247] PF_BRIDGE: br_mdb_parse() with invalid attr
[  823.026106][ T5249] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a)

13:24:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  823.070726][ T5258] kernel msg: ebtables bug: please report to author: bad policy
[  823.108827][ T5259] kernel msg: ebtables bug: please report to author: bad policy
13:24:31 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x68000000)

13:24:31 executing program 5:

[  823.179940][ T5269] PF_BRIDGE: br_mdb_parse() with invalid attr
[  823.219439][ T5260] *** Guest State ***
[  823.260818][ T5260] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  823.302454][ T5260] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  823.338102][ T5260] CR3 = 0x0000000000000000
[  823.342665][ T5260] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  823.349785][ T5260] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  823.356897][ T5260] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  823.364414][ T5260] CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
[  823.365155][ T5279] kernel msg: ebtables bug: please report to author: bad policy
[  823.381426][ T5281] kernel msg: ebtables bug: please report to author: bad policy
[  823.389341][ T5260] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  823.405376][ T5260] SS:   sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000
[  823.415232][ T5260] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  823.424238][ T5260] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  823.433338][ T5260] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  823.445038][ T5260] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  823.454820][ T5260] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  823.463829][ T5260] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  823.478624][ T5260] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  823.487680][ T5260] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  823.494922][ T5260] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  823.506000][ T5260] Interruptibility = 00000000  ActivityState = 00000000
[  823.513231][ T5260] *** Host State ***
[  823.517454][ T5260] RIP = 0xffffffff811b37d0  RSP = 0xffff888051f378b8
[  823.524293][ T5260] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  823.531834][ T5260] FSBase=00007f8db9015700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000
[  823.540709][ T5260] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[  823.547683][ T5260] CR0=0000000080050033 CR3=0000000051d49000 CR4=00000000001426e0
[  823.555975][ T5260] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360
[  823.563930][ T5260] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  823.570953][ T5260] *** Control State ***
[  823.575203][ T5260] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000cb
[  823.583766][ T5260] EntryControls=0000d1ff ExitControls=002fefff
[  823.590263][ T5260] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  823.598270][ T5260] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  823.605774][ T5260] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[  823.613417][ T5260]         reason=80000021 qualification=0000000000000000
[  823.620701][ T5260] IDTVectoring: info=00000000 errcode=00000000
[  823.627162][ T5260] TSC Offset = 0xfffffe4496d98211
[  823.632322][ T5260] TPR Threshold = 0x00
[  823.636723][ T5260] EPT pointer = 0x00000000a485101e
13:24:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
munlockall()
fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x3)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x5, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x4, 0x7fff, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x272fa5dd40f479da)
ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000002c0)="1907b820e7a804a24239c3b668e2cd84f58fef725adfdad6088f302b070704e5e5ffe43f8435b657d3d5d23321ee3b2512973e2b413ab24f87c5f4ef5d7649eb0da5b76c97e4ffa6161c68ef623149247ca3eaf993a800b80ddf6183c8e46f4dcf8d3c0a9174ad44c794886af6aa0171247a666b5d83133c2d4d50f8ba0a425b20298584141be899c8e9e13fe49f69e8b2c29a5b3b74e45fb34c1155bbab72f8f1521422018b102e1aa6ca47f55507100c9a46104760a131025622af8a0afe6505301f3dbd2c8910dc02ad8e2d1c2267b5202ff1b210f22c2f558ddf3ddbc9dcd59b6a502ef58ff1507593f895dbcb172bcd786cf46858a238d829eff99345")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0)

13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffff)

13:24:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c000000)

13:24:32 executing program 5:

13:24:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffa888)

[  823.809443][ T5295] __nla_parse: 33 callbacks suppressed
[  823.809451][ T5295] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  823.832834][ T5295] PF_BRIDGE: br_mdb_parse() with invalid attr
[  823.850389][ T5296] kernel msg: ebtables bug: please report to author: bad policy
13:24:32 executing program 5:

13:24:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  823.858236][ T5297] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  823.887481][ T5297] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x74000000)

[  823.904232][ T5298] mmap: syz-executor2 (5298) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffff000)

13:24:32 executing program 5:

[  824.002940][ T5312] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  824.066777][ T5312] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

13:24:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x300)

13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff7f)

[  824.109985][ T5316] kernel msg: ebtables bug: please report to author: bad policy
13:24:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a000000)

[  824.168322][ T5326] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  824.168472][ T5324] kernel msg: ebtables bug: please report to author: bad policy
13:24:32 executing program 5:

13:24:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  824.209979][ T5326] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff9e)

[  824.270737][ T5326] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:32 executing program 5:

13:24:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3ad)

[  824.371784][ T5326] PF_BRIDGE: br_mdb_parse() with invalid attr
[  824.387705][ T5343] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  824.399004][ T5342] kernel msg: ebtables bug: please report to author: bad policy
13:24:32 executing program 5:

[  824.439620][ T5351] kernel msg: ebtables bug: please report to author: bad policy
[  824.447431][ T5343] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffffff0)

13:24:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x500)

13:24:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x81000000)

13:24:32 executing program 5:

13:24:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x40030000000000)

[  824.650210][ T5369] kernel msg: ebtables bug: please report to author: bad policy
[  824.681435][ T5373] kernel msg: ebtables bug: please report to author: bad policy
13:24:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:32 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x88a8ffff)

[  824.722053][ T5365] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:33 executing program 5:

[  824.790362][ T5365] PF_BRIDGE: br_mdb_parse() with invalid attr
[  824.823659][ T5380] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:33 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x9effffff)

13:24:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffffffffff)

13:24:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  824.838276][ T5380] PF_BRIDGE: br_mdb_parse() with invalid attr
[  824.847125][ T5385] kernel msg: ebtables bug: please report to author: bad policy
[  824.873682][ T5389] kernel msg: ebtables bug: please report to author: bad policy
[  825.011783][ T5400] kernel msg: ebtables bug: please report to author: bad policy
[  825.024038][ T5404] kernel msg: ebtables bug: please report to author: bad policy
13:24:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x600)

[  825.117439][ T5408] pic_ioport_write: 8 callbacks suppressed
[  825.117442][ T5408] kvm: pic: single mode not supported
[  825.119066][ T5408] pic_ioport_write: 8 callbacks suppressed
[  825.119069][ T5408] kvm: pic: level sensitive irq not supported
[  825.119771][ T5361] kvm: pic: level sensitive irq not supported
[  825.139390][ T5361] kvm: pic: single mode not supported
13:24:33 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc4030000)

13:24:33 executing program 5:

13:24:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x100000000000000)

13:24:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:33 executing program 5:

[  825.234807][ T5415] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:33 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffff)

[  825.289317][ T5415] PF_BRIDGE: br_mdb_parse() with invalid attr
[  825.301340][ T5419] kernel msg: ebtables bug: please report to author: bad policy
[  825.309205][ T5416] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x700)

13:24:33 executing program 5:

[  825.357470][ T5426] kernel msg: ebtables bug: please report to author: bad policy
[  825.371623][ T5416] PF_BRIDGE: br_mdb_parse() with invalid attr
[  825.388886][ T5416] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:33 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffa888)

13:24:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x200000000000000)

[  825.421085][ T5432] PF_BRIDGE: br_mdb_parse() with invalid attr
[  825.533662][ T5441] PF_BRIDGE: br_mdb_parse() with invalid attr
[  826.106299][    C0] net_ratelimit: 16 callbacks suppressed
[  826.106307][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  826.117782][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  826.123610][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  826.129425][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  826.135259][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  826.141061][    C0] protocol 88fb is buggy, dev hsr_slave_1
13:24:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ustat(0xc953, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:34 executing program 5:

13:24:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa00)

13:24:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:34 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffff000)

13:24:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x300000000000000)

[  826.186263][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  826.192010][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:34 executing program 5:

13:24:34 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff7f)

13:24:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  826.312413][ T5456] kernel msg: ebtables bug: please report to author: bad policy
[  826.320368][ T5458] PF_BRIDGE: br_mdb_parse() with invalid attr
[  826.364737][ T5455] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc00)

13:24:34 executing program 5:

13:24:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x400000000000000)

[  826.420974][ T5465] kvm: pic: single mode not supported
[  826.437045][ T5469] kvm: pic: level sensitive irq not supported
[  826.467256][ T5469] kernel msg: ebtables bug: please report to author: bad policy
[  826.474333][ T5465] kvm: pic: level sensitive irq not supported
[  826.478235][ T5472] kvm: pic: single mode not supported
[  826.501538][ T5472] kernel msg: ebtables bug: please report to author: bad policy
[  826.550538][ T5478] PF_BRIDGE: br_mdb_parse() with invalid attr
[  826.592588][ T5477] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f0000000000), 0x4800)

13:24:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff9e)

13:24:35 executing program 5:

13:24:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe00)

13:24:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x500000000000000)

[  826.826101][ T5495] kernel msg: ebtables bug: please report to author: bad policy
[  826.826354][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  826.839612][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  826.843911][ T5491] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 5:

13:24:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffffff0)

[  826.875514][ T5498] kernel msg: ebtables bug: please report to author: bad policy
[  826.891553][ T5502] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf00)

13:24:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:35 executing program 5:

[  826.966728][ T5502] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x40030000000000)

[  827.082785][ T5515] PF_BRIDGE: br_mdb_parse() with invalid attr
[  827.084515][ T5501] kvm: pic: single mode not supported
[  827.089476][ T3865] kvm: pic: level sensitive irq not supported
[  827.123529][ T5519] kvm: pic: level sensitive irq not supported
[  827.130897][ T5519] kernel msg: ebtables bug: please report to author: bad policy
[  827.145769][ T5521] kernel msg: ebtables bug: please report to author: bad policy
[  827.149110][ T5524] kvm: pic: single mode not supported
[  827.156778][ T5524] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x40000)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000100))
write$ppp(r1, &(0x7f0000000000)="0773fb5d74b322b81ba5af19f311b6f42eaae0185964c94bb0dce8b9ec0b", 0x1e)

13:24:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x600000000000000)

13:24:35 executing program 5:

13:24:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000)

13:24:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffffffffff)

13:24:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  827.347091][ T5528] kvm: pic: single mode not supported
[  827.348481][ T5500] kvm: pic: level sensitive irq not supported
[  827.355034][ T5500] kvm: pic: level sensitive irq not supported
[  827.363247][ T5528] kvm: pic: single mode not supported
[  827.452667][ T5535] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x100000000000000)

13:24:35 executing program 5:

13:24:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x700000000000000)

[  827.493210][ T5539] PF_BRIDGE: br_mdb_parse() with invalid attr
[  827.515430][ T5538] kernel msg: ebtables bug: please report to author: bad policy
13:24:35 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f00)

13:24:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  827.576553][ T5544] kernel msg: ebtables bug: please report to author: bad policy
[  827.611041][ T5547] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:35 executing program 5:

[  827.662797][ T5553] PF_BRIDGE: br_mdb_parse() with invalid attr
[  827.689233][ T5558] PF_BRIDGE: br_mdb_parse() with invalid attr
[  827.717856][ T5557] kvm: pic: single mode not supported
[  827.719974][ T3865] kvm: pic: level sensitive irq not supported
13:24:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x80802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x4400)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x800000000000000)

13:24:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x200000000000000)

13:24:36 executing program 5:

13:24:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000)

[  827.869276][ T5564] kernel msg: ebtables bug: please report to author: bad policy
13:24:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:36 executing program 5:

[  827.918244][ T5575] PF_BRIDGE: br_mdb_parse() with invalid attr
[  827.930311][ T5573] PF_BRIDGE: br_mdb_parse() with invalid attr
[  827.940426][ T5576] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x300000000000000)

13:24:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4800)

[  828.030358][ T5583] kernel msg: ebtables bug: please report to author: bad policy
13:24:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa00000000000000)

13:24:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  828.078263][ T5578] kvm: pic: single mode not supported
[  828.080740][ T3865] kvm: pic: level sensitive irq not supported
13:24:36 executing program 5:

[  828.129420][ T5591] PF_BRIDGE: br_mdb_parse() with invalid attr
[  828.166442][ T5592] PF_BRIDGE: br_mdb_parse() with invalid attr
[  828.229069][ T5596] kernel msg: ebtables bug: please report to author: bad policy
[  828.254340][ T5601] kernel msg: ebtables bug: please report to author: bad policy
13:24:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$UHID_CREATE2(r2, &(0x7f00000002c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0xbf, 0x20, 0x4, 0x9, 0x400, 0x5, "2732f769e3f296a26aac6e8d24ac4f2704bc380bd3f006f145341484a7d3b6e9a8a12b251a08d01126b45ab1f6dc5ac08fd9209dcee6366f6ca7f45e48422452b54aec397ad7a235030c15ac47f6a26063e52cb6195a7bba7f060c60e1ff900bf692aa43a75abb78ebf9483b163c3379fb303bafec01d72e1413d04b78c9061d965f42e751fc1680e8b5a7332cf8e345b89017613b35e0d6b009f01367beab5bd3dcc532ef731e28377b651cdf144a528651a2b12e8c2d6d12ca85765cd1fc"}, 0x1d7)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x10000, 0xffffffffffffff82, 0x81, 0x425, 0xe, 0x100000001, 0x7ff, 0x9, 0xa, 0x80000001})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
munmap(&(0x7f000000c000/0x1000)=nil, 0x1000)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000580)={0x0, 0xce45, 0xa1a6, [], &(0x7f0000000540)=0x8})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000004c0)={'icmp6\x00\x00\x00\x00\x00\x06\x87\xa2\x7f\x00'}, &(0x7f0000000500)=0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
userfaultfd(0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13:24:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c00)

13:24:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x400000000000000)

13:24:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc00000000000000)

13:24:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:36 executing program 5:

13:24:36 executing program 5:

13:24:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  828.449168][ T5613] kernel msg: ebtables bug: please report to author: bad policy
[  828.463998][ T5617] PF_BRIDGE: br_mdb_parse() with invalid attr
[  828.479850][ T5616] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:36 executing program 5:

13:24:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe00000000000000)

13:24:36 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x500000000000000)

[  828.542270][ T5618] PF_BRIDGE: br_mdb_parse() with invalid attr
[  828.571697][ T5627] kernel msg: ebtables bug: please report to author: bad policy
13:24:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5865)

[  828.657891][ T5636] PF_BRIDGE: br_mdb_parse() with invalid attr
[  828.694818][ T5638] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$caif_stream(0x25, 0x1, 0x5)
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000003c0))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000002c0)={<r4=>r2})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x5, 0x8000, 0x5, 0x7, <r5=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e21, 0x8, @rand_addr="dd20b47e46efaba2aa92cb1de70df982", 0xc45b}}}, &(0x7f0000000000)=0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r5, 0x7}, 0x8)
bind$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x0, 0x1, 0x5, 0x6, 0x0, [{0x221d, 0x2, 0x1, [], 0x5}, {0x5, 0x9, 0x0, [], 0x3f}, {0x32ea, 0x3, 0x339f, [], 0x9}, {0x6, 0x6, 0x1, [], 0x3}, {0xffffffffffffa11f, 0xfff, 0x346, [], 0x8001}, {0x7, 0x4, 0x8, [], 0x9}, {0x0, 0x0, 0x0, [], 0x100000001}, {0x3f6, 0x5, 0x683, [], 0x3000}, {0x80000000, 0x5, 0x1, [], 0x1}, {0x16, 0x2, 0x0, [], 0x8}, {0x1ff, 0x2, 0x8, [], 0x3164}, {0xa, 0x4, 0xfffffffffffffffc, [], 0x100}, {0x40, 0x1000, 0x2, [], 0x73}, {0x7ff, 0x80, 0xfffffffffffffffb, [], 0x2}, {0x0, 0x8, 0x401, [], 0x3f}, {0xc1, 0x9, 0xfffffffffffffc01, [], 0x8}, {0x8, 0x67, 0x0, [], 0x9}, {0x2, 0x3, 0x8, [], 0x40000}, {0x1, 0xfffffffffffffffe, 0x20, [], 0x2}, {0x7fffffff, 0x2, 0x3f, [], 0x2}, {0x14, 0x7, 0xffff, [], 0x7}, {0x1000, 0x0, 0x7, [], 0xd0}, {0x7fff, 0x1000, 0x1f, [], 0x1ff}, {0x4, 0x8, 0x8001, [], 0x2}]}})
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040))
r6 = dup(r2)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x100000001, 0x40, 0x4, 0x3, 0x4, 0x800, 0x3}, 0x1c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000)

13:24:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x600000000000000)

13:24:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:37 executing program 5:

13:24:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf00000000000000)

13:24:37 executing program 5:

[  828.972430][ T5649] __nla_parse: 27 callbacks suppressed
[  828.972438][ T5649] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  829.002738][ T5649] PF_BRIDGE: br_mdb_parse() with invalid attr
[  829.010344][ T5655] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  829.029028][ T5655] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6558)

13:24:37 executing program 5:

[  829.071418][ T5656] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:24:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x200000)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'bridge_slave_1\x00', 0x200})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x100, @empty, 0x8}, @in6={0xa, 0x4e20, 0x10001, @mcast1, 0xfffffffffffffff8}, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x3}, @in6={0xa, 0x8, 0x8, @dev={0xfe, 0x80, [], 0x16}, 0x4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xfffffffffffffffd, @mcast1, 0x80}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @rand_addr=0x9}], 0xdc)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = geteuid()
stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RGETATTR(r1, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x2}, 0x80, r4, r5, 0xa3, 0x0, 0x200, 0x32169d5a, 0x1ff, 0x11, 0x6, 0x4, 0x8, 0x7, 0xc671, 0x3, 0x10001, 0x0, 0x9}}, 0xa0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000500)={0xdc, 0x400, 0x9, 0x1, 0x5, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:37 executing program 5:

[  829.135754][ T5656] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x1000000000000000)

13:24:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  829.175948][ T5668] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  829.226624][ T5668] PF_BRIDGE: br_mdb_parse() with invalid attr
[  829.263676][ T5675] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x700000000000000)

13:24:37 executing program 5:

[  829.264644][ T5678] kernel msg: ebtables bug: please report to author: bad policy
13:24:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6800)

13:24:37 executing program 5:

[  829.352685][ T5675] PF_BRIDGE: br_mdb_parse() with invalid attr
[  829.365211][ T5682] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:24:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  829.414061][ T5682] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000000000000000)

[  829.459640][ T5691] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:37 executing program 5:

13:24:37 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x800000000000000)

[  829.502028][ T5691] PF_BRIDGE: br_mdb_parse() with invalid attr
[  829.526673][ T5696] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  829.576315][ T5696] PF_BRIDGE: br_mdb_parse() with invalid attr
[  829.596811][ T5701] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  829.663267][ T5701] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:38 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2800, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:24:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c00)

13:24:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f00000000000000)

13:24:38 executing program 5:

13:24:38 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa00000000000000)

13:24:38 executing program 5:

13:24:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000440)=""/140)

[  829.966749][ T5712] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  829.991709][ T5712] PF_BRIDGE: br_mdb_parse() with invalid attr
[  829.999593][ T5709] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000000000000000)

[  830.175960][ T5723] pic_ioport_write: 7 callbacks suppressed
[  830.176002][ T5723] kvm: pic: single mode not supported
[  830.185060][ T5723] pic_ioport_write: 7 callbacks suppressed
[  830.185065][ T5723] kvm: pic: level sensitive irq not supported
[  830.203735][ T5723] kvm: pic: level sensitive irq not supported
[  830.215599][ T5723] kvm: pic: single mode not supported
[  830.404603][ T5715] PF_BRIDGE: br_mdb_parse() with invalid attr
[  830.412313][ T5727] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7400)

13:24:38 executing program 5:

13:24:38 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc00000000000000)

13:24:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x185000, 0x0)
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000002c0)=""/201)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4800000000000000)

13:24:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c12a41d88b070")
clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x21)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x95, 0x65})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

[  830.676360][ T5737] kvm: pic: single mode not supported
[  830.684330][ T5737] kvm: pic: level sensitive irq not supported
[  830.697663][ T5737] kvm: pic: level sensitive irq not supported
[  830.709510][ T5737] kvm: pic: single mode not supported
13:24:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8007c, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  831.033284][ T5754] kvm: pic: single mode not supported
[  831.035837][ T5754] kvm: pic: level sensitive irq not supported
[  831.048504][ T5754] kvm: pic: level sensitive irq not supported
13:24:39 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='stack\x00')
sendfile(r0, r1, &(0x7f00000000c0)=0x2000000, 0x80000003)

[  831.062530][ T8019] kvm: pic: single mode not supported
[  831.095220][ T5741] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.103648][ T5742] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.110425][ T5743] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.123920][ T5745] IPVS: ftp: loaded support on port[0] = 21
13:24:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a00)

13:24:39 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe00000000000000)

13:24:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c00000000000000)

[  831.306257][    C0] net_ratelimit: 24 callbacks suppressed
[  831.306263][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  831.317826][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  831.418408][ T5767] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.424622][ T5765] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.430964][ T5768] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.450461][ T5765] PF_BRIDGE: br_mdb_parse() with invalid attr
[  831.459283][ T5768] PF_BRIDGE: br_mdb_parse() with invalid attr
[  832.037357][ T5745] chnl_net:caif_netlink_parms(): no params data found
[  832.163862][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.171073][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.178946][ T5745] device bridge_slave_0 entered promiscuous mode
[  832.186166][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.193357][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.201010][ T5745] device bridge_slave_1 entered promiscuous mode
[  832.311426][ T5745] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  832.321067][ T5745] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  832.338907][ T5745] team0: Port device team_slave_0 added
[  832.345289][ T5745] team0: Port device team_slave_1 added
[  832.350973][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  832.351026][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  832.351121][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  832.351167][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  832.351254][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  832.351313][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  832.426493][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  832.432231][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  832.557914][ T5745] device hsr_slave_0 entered promiscuous mode
[  832.616488][ T5745] device hsr_slave_1 entered promiscuous mode
[  832.800580][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.807643][ T5745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  832.814882][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.821967][ T5745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  832.955276][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[  832.968846][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  832.978952][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.987397][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.995323][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  833.006940][ T8019] device bridge_slave_1 left promiscuous mode
[  833.013104][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state
[  833.087272][ T8019] device bridge_slave_0 left promiscuous mode
[  833.093429][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.818663][ T8019] device hsr_slave_1 left promiscuous mode
[  835.880912][ T8019] device hsr_slave_0 left promiscuous mode
[  835.940254][ T8019] team0 (unregistering): Port device team_slave_1 removed
[  835.951034][ T8019] team0 (unregistering): Port device team_slave_0 removed
[  835.961659][ T8019] bond0 (unregistering): Releasing backup interface bond_slave_1
[  836.002841][ T8019] bond0 (unregistering): Releasing backup interface bond_slave_0
[  836.098108][ T8019] bond0 (unregistering): Released all slaves
[  836.260332][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[  836.274979][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  836.283576][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  836.292032][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.299180][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  836.308805][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  836.317647][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  836.325852][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.332928][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  836.346575][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  836.355084][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  836.363964][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  836.372452][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  836.382412][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  836.390630][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  836.399279][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  836.412789][ T5745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  836.423458][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  836.434824][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  836.443880][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  836.452461][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  836.460668][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  836.468769][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  836.487318][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.506275][    C0] net_ratelimit: 12 callbacks suppressed
[  836.506282][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  836.517735][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  836.523538][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  836.529356][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  836.535113][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  836.540930][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  836.556321][    C1] protocol 88fb is buggy, dev hsr_slave_0
13:24:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:44 executing program 5:
utime(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil)

13:24:44 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5004000000000000)

13:24:44 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8100)

13:24:44 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf00000000000000)

13:24:44 executing program 2:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000300)=0xfffffffffffffff7)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000003c0)=0x3ff)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="c200000074b0572aa12fc869b9e8f9fc3bba9a49df93235d41001c51930b75db8a4a8afb316b13992ca01b9edbeb666d27d0002107204e0760cc102ad93fbd0ead34c3ff8d8ef5237f239778c051037bcb23555892cfcc5e023c1207b1cab344b7780168816d4b12f1650270b23b662fd0aeca09c320c3da42064325ab7a63fc14b41ebb7323550970f6034ce94d4f947739d904a2938bc2e72b1b82d14e68515708ad0f715e6d35741641c8be89b50a889c63b11e0a570587e108bd478b81c0f310fe96a475340ce98aeaede648c95d4dbb"], &(0x7f0000000100)=0xca)
getsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000340), &(0x7f0000000380)=0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
getegid()
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  836.562094][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  836.569764][ T5779] kernel msg: ebtables bug: please report to author: bad policy
[  836.578906][ T5781] kernel msg: ebtables bug: please report to author: bad policy
[  836.586285][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  836.592347][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  836.623726][ T5787] __nla_parse: 11 callbacks suppressed
[  836.623745][ T5787] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:44 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, 0x0, 0x0, 0x0)

[  836.672594][ T5787] PF_BRIDGE: br_mdb_parse() with invalid attr
[  836.683068][ T5792] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  836.692875][ T5792] PF_BRIDGE: br_mdb_parse() with invalid attr
[  836.727240][ T5785] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  836.734075][ T5798] kvm: pic: single mode not supported
[  836.737656][ T5798] kernel msg: ebtables bug: please report to author: bad policy
[  836.756931][ T5785] PF_BRIDGE: br_mdb_parse() with invalid attr
[  836.762640][ T5789] kvm: pic: level sensitive irq not supported
13:24:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xad03)

13:24:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  836.771602][ T3865] kvm: pic: level sensitive irq not supported
13:24:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x1000000000000000)

[  836.828145][ T3865] kvm: pic: single mode not supported
13:24:45 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote={0xfe, 0x80, [0x5]}, 0x2000000, 0x0, 0x2, 0x1}, 0x20)

13:24:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000000000000000)

13:24:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf000)

[  836.934251][ T5813] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  836.981239][ T5813] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.004935][ T5818] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  837.020617][ T5818] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$UHID_CREATE2(r2, &(0x7f00000002c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0xbf, 0x20, 0x4, 0x9, 0x400, 0x5, "2732f769e3f296a26aac6e8d24ac4f2704bc380bd3f006f145341484a7d3b6e9a8a12b251a08d01126b45ab1f6dc5ac08fd9209dcee6366f6ca7f45e48422452b54aec397ad7a235030c15ac47f6a26063e52cb6195a7bba7f060c60e1ff900bf692aa43a75abb78ebf9483b163c3379fb303bafec01d72e1413d04b78c9061d965f42e751fc1680e8b5a7332cf8e345b89017613b35e0d6b009f01367beab5bd3dcc532ef731e28377b651cdf144a528651a2b12e8c2d6d12ca85765cd1fc"}, 0x1d7)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x10000, 0xffffffffffffff82, 0x81, 0x425, 0xe, 0x100000001, 0x7ff, 0x9, 0xa, 0x80000001})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
munmap(&(0x7f000000c000/0x1000)=nil, 0x1000)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000580)={0x0, 0xce45, 0xa1a6, [], &(0x7f0000000540)=0x8})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000004c0)={'icmp6\x00\x00\x00\x00\x00\x06\x87\xa2\x7f\x00'}, &(0x7f0000000500)=0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
userfaultfd(0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13:24:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000000000000000)

[  837.032163][ T5820] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  837.053039][ T5820] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x34000)

[  837.090864][ T5822] kernel msg: ebtables bug: please report to author: bad policy
[  837.129125][ T5831] kernel msg: ebtables bug: please report to author: bad policy
[  837.156411][ T5833] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:24:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6558000000000000)

[  837.203220][ T5833] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.245474][ T5835] kvm: pic: single mode not supported
[  837.247175][ T5835] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  837.276996][ T5826] kvm: pic: level sensitive irq not supported
[  837.277827][ T3865] kvm: pic: level sensitive irq not supported
[  837.309698][ T5835] kvm: pic: single mode not supported
[  837.311979][ T5835] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.331781][ T5838] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  837.354613][ T5838] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.379660][ T3865] kvm: pic: single mode not supported
[  837.406792][ T3865] kvm: pic: level sensitive irq not supported
[  837.419149][ T5841] kvm: pic: level sensitive irq not supported
[  837.432673][ T3865] kvm: pic: single mode not supported
13:24:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f00000000000000)

13:24:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:45 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x400300)

13:24:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6800000000000000)

13:24:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  837.556791][ T5847] kernel msg: ebtables bug: please report to author: bad policy
[  837.570254][ T5853] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  837.593058][ T5856] kernel msg: ebtables bug: please report to author: bad policy
13:24:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  837.606311][ T5853] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.643959][ T5852] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.683083][ T5854] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.690861][ T5859] kvm: pic: single mode not supported
13:24:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c00000000000000)

13:24:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffff)

[  837.699338][ T3865] kvm: pic: level sensitive irq not supported
[  837.767614][ T5863] kvm: pic: level sensitive irq not supported
[  837.776035][ T5863] kernel msg: ebtables bug: please report to author: bad policy
[  837.807610][ T5868] kvm: pic: single mode not supported
[  837.808811][ T5868] PF_BRIDGE: br_mdb_parse() with invalid attr
[  837.832642][ T5873] kernel msg: ebtables bug: please report to author: bad policy
13:24:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x80802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x4400)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000000000000000)

13:24:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7400000000000000)

13:24:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x1000000)

[  837.976617][ T5879] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.003129][ T5881] kernel msg: ebtables bug: please report to author: bad policy
[  838.015275][ T5887] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  838.048768][ T5886] kernel msg: ebtables bug: please report to author: bad policy
[  838.057548][ T5889] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4800000000000000)

13:24:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a00000000000000)

[  838.175803][ T5897] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.202052][ T5892] kvm: pic: single mode not supported
[  838.209111][ T5900] kvm: pic: level sensitive irq not supported
[  838.215971][ T5900] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.248724][ T5903] kvm: pic: level sensitive irq not supported
[  838.268486][ T5903] kernel msg: ebtables bug: please report to author: bad policy
[  838.296535][ T5906] kvm: pic: single mode not supported
[  838.353029][ T5906] kernel msg: ebtables bug: please report to author: bad policy
13:24:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x801, 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x2000000)

13:24:46 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c00000000000000)

13:24:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8100000000000000)

[  838.581789][ T5915] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.596506][ T5917] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.614179][ T5916] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.634683][ T5917] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.643445][ T5916] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000000000000000)

13:24:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x88a8ffff00000000)

13:24:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3000000)

[  838.792029][ T5930] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.811269][ T5929] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x9effffff00000000)

[  838.860032][ T5931] kernel msg: ebtables bug: please report to author: bad policy
13:24:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6558000000000000)

[  838.934893][ T5927] kernel msg: ebtables bug: please report to author: bad policy
[  838.947000][ T5938] PF_BRIDGE: br_mdb_parse() with invalid attr
[  838.958380][ T5940] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.080598][ T5946] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.123771][ T5948] kernel msg: ebtables bug: please report to author: bad policy
[  839.179662][ T5951] kernel msg: ebtables bug: please report to author: bad policy
13:24:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffff00000000)

13:24:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4000000)

13:24:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6800000000000000)

13:24:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="a700000072f150715f657046b07bda5e5cfaab125e47d39640da36e7bdce978e68d7b19d48cf5615dbab64e3be582bdf2e75ad9ac1adc9fb60c63614ab035640ac238d9faaad43ecbbc23ebe194d697cf92af32a81e59a2c523855d0ab8c8323f171c834b20532421933b11615bd25e540af22523b9378166d91e189ea2d2089e8f33ca6f11b3b54df7d352e1430b3d6f4903a7e8573d5832de3031ee929ef909bfd555f3e17b3378a1213b36655c9870aa499c6186dfb9b59963789e7b5df3a89cbf249b88276323387f7f9094b07c6e921859605e83dffcea3c63e1a781903572dfd9f4a1b024c00595e0bb9f267c0629c49a96b2b099b624ec7bb4b7215fe1c12be5e0210c87a4daa05df6457dad1b6623f8e21e591fecc973b84287bf220c8eaa08c723d42232ba374fcd1ebb17a1661d954e951daf0a2674d2e16e368449e62856493f2dd0cc0ca3a963bea176b07c8f707502514450731ddb51225032a37bfb0f66fc9c81d8388cd1e7d9e7ccffb75812a1af692c9a1a645524582664d51eddf5f046d3c2c14a0f1a69598234edadbff83c82daaec1d548f0066e7af2207953ea6a7a21fefabec80ab972dc31cf759"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  839.480525][ T5962] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.492293][ T5966] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.505625][ T5967] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.513103][ T5964] kernel msg: ebtables bug: please report to author: bad policy
13:24:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff7f00000000)

13:24:47 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c00000000000000)

[  839.532880][ T5971] kernel msg: ebtables bug: please report to author: bad policy
13:24:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:47 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x5000000)

[  839.666476][ T5978] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.706458][ T5982] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.713935][ T5986] kernel msg: ebtables bug: please report to author: bad policy
[  839.721773][ T5984] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6000000)

13:24:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7400000000000000)

[  839.810741][ T5991] kernel msg: ebtables bug: please report to author: bad policy
[  839.836105][ T5995] PF_BRIDGE: br_mdb_parse() with invalid attr
[  839.852736][ T5997] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x19c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x8002)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000105b}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x2604, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

13:24:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffffffffffff000)

13:24:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a00000000000000)

13:24:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7000000)

13:24:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  840.114591][ T6006] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.148500][ T6008] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.155784][ T6010] kernel msg: ebtables bug: please report to author: bad policy
[  840.197896][ T6015] kernel msg: ebtables bug: please report to author: bad policy
13:24:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x40, 0x400000)
shmget(0x3, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x12)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x50, r2, 0x704, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcaef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}]}, 0x50}}, 0x44000)
accept$unix(r1, 0x0, &(0x7f0000000080))

13:24:48 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8000000)

13:24:48 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x8100000000000000)

13:24:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  840.368787][ T6029] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.392352][ T6028] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  840.429941][ T6036] kernel msg: ebtables bug: please report to author: bad policy
[  840.434171][ T6030] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.445351][ T6029] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.459337][ T6038] kernel msg: ebtables bug: please report to author: bad policy
13:24:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x10000)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1)

[  840.571327][ T6045] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.612003][ T6045] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.619194][ T6048] kernel msg: ebtables bug: please report to author: bad policy
[  840.641173][ T6051] kernel msg: ebtables bug: please report to author: bad policy
13:24:49 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000100)=0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x88a8ffff00000000)

13:24:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xa000000)

13:24:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x77c0d542, 0x7fff, 0x7, 0xfffffffffffff800, 0x0, 0x380000, 0x0, 0x0, 0x21, 0x1d48, 0x50d, 0x9, 0xfff, 0x80000000, 0x3, 0x9, 0x200, 0x3, 0x1, 0xf6, 0xfffffffffffeffff, 0xd7, 0x1, 0x8, 0x2, 0x1, 0x6, 0xb2d, 0x20000000000, 0x0, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x8, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x40}, 0x1050, 0x8001, 0x3ff, 0x3, 0x0, 0x3, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffff9c, 0x8)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  840.834956][ T6061] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.856469][ T6060] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.891323][ T6065] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.892111][ T6063] kernel msg: ebtables bug: please report to author: bad policy
[  840.907458][ T6069] PF_BRIDGE: br_mdb_parse() with invalid attr
[  840.916162][ T6071] kernel msg: ebtables bug: please report to author: bad policy
13:24:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc000000)

13:24:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x9effffff00000000)

13:24:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000002840)={&(0x7f0000000100)=@generic={0x2, "31abdcb1dcfe5e222e01962e1ef3402b32e120731119f16d8d1492fa598742ce5d891dc77425b269c9e75d37ac32e8d1ae11416ed274d3ed65aa7cf84ecaa0dafcbe30ad22bc92c3f412cae78fea3d1e95aaeaa4d99a4eeae53411adcb666148cb9f3ff6a09c8641793865d18b0463a0444e6871518383dd5cec7ca365b6"}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000300)="eb9a3d36ae9b7a7e33d3a29b3d16b345d5772323dca032c7d49ffeafafc83391f0451494ebaede57ee7e946097137f513303c52716952ef4263c7eb673c6253978ce1bdfba3dde766998ad565fb7a48877a36f1c61658a2bc1cbf2b5832ba17a889fe11b4550b0e56fa34d638c3da1db1917d92e44", 0x75}, {&(0x7f00000001c0)}, {&(0x7f0000000380)="6086e9db5543ec393f2cd268e0035fd75f106a3c4589cc8d575a1cb792a4a1d9d2ef4e1044f73a38857cb88241ce1996d17a0452e35d62baceca5f1cce0ba3fa7be0cc3226089492a162e0080347614cc7", 0x51}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="841d52eca8a5f9f65834f83db35224a84125bfc3cf23f825c15e3c4c2fe81f8b0c1b695fdccf819e962f018fade718573cb2af8d37dc08e8ba6b2503d4d4d445a857e436ec314f56ab218024008688d2fce59306b2b3e3c0e9cf4b7b864d3653aa236271f78006ba11f6a313d315b0c76a6e5c569268b5e841a751bea346c321d580a3bb0e2301abc7bfe11ae028ce72d526f7e244", 0x95}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="b6f65dd350aff1d47c548723bb33637920526b5083c16543a9dafa4e71416928f5d4399bb68aa548e2668b2755ab699079dd861767ebf6cfd6ce927379354d866f28993d2021cd3c83ecfa0469e63a3ca69d8a3bf95b2eaa3feacc662427a0c4128ae770b7f83f0f574881001dfed502ea55da12179aeed5af22cb495b342ae69898312ab6fa50c6d1056f0ec93961e1b5e3a219d4dcd8a0c3f4045cc35d848c63208932454719e11f07a0dc930e5822a830df37c902c738a582", 0xba}, {&(0x7f0000002580)="3610c89612be93b5e8a4", 0xa}, {&(0x7f00000025c0)="e9fb1ca511e4c17b9784e0b873fe3d0970e8003b68ad44758bd8060244e0c041392c2f9b4cf57b6848dc63826a5c01029e1f8fe348392100847b52027536ef9519394b27cfb882f3898eb4b232eecb9a1592e9397ac9f74c11d7f05af494c02877af7c95065b85761134a484ca0d28eb8e41a40cef1ca572527fed1d841d07474b17c1e1c350684bab0f1d3f9e7569e71ebf632d68ce5513bea51600c9", 0x9d}], 0x9, &(0x7f0000002740)=[{0xe8, 0x3a, 0x8001, "30584cd8a046d4ed6c39c0c5872f978a344f86d4bbf5003c6c27ea578eaf58d87c3a2c87b04d353eb437cb696bd68907ffa2f8ecf759ea6a96e55acc65b13ac44fc9e45cd80aac5f134f9824762a68ee0eb949b11ce09b4fe191f4b49928b5cca42df4f73e929479a951f8bf7733d6e3a5d1756809a9cf8ca9c996a1272174126c0ce3081b7e531298548b99b85f1714c03362c1e70644d8948a11d7067d5b8292f1cdf494179e2453fbf09e03c626e852f9d7d1d36ac6cc76625e79c539bb49d1c48f66b542f4894b491bfdfaa6ccb078197d4d5d8d8af8"}], 0xe8}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x4}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002880)={r2, @in={{0x2, 0x4e24, @remote}}, 0x5, 0x2, 0x8001, 0x0, 0x800000000020}, 0x98)

[  841.074216][ T6079] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.094609][ T6084] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.102200][ T6085] kernel msg: ebtables bug: please report to author: bad policy
[  841.127742][ T6082] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.149206][ T6091] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.165914][ T6079] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:49 executing program 0:
r0 = socket$kcm(0x10, 0xfffffffffffffffe, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  841.169329][ T6092] kernel msg: ebtables bug: please report to author: bad policy
13:24:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xc403000000000000)

[  841.312443][ T6100] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:49 executing program 2:
prctl$PR_SET_PDEATHSIG(0x1, 0x38)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xe000000)

13:24:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0)
recvfrom$ax25(r1, &(0x7f0000000080)=""/147, 0x93, 0x2, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffff00000000)

[  841.511495][ T6112] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.537253][ T6117] kernel msg: ebtables bug: please report to author: bad policy
[  841.544970][ T6116] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:49 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf000000)

[  841.571884][ T6115] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.586409][ T6122] kernel msg: ebtables bug: please report to author: bad policy
13:24:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x3, 0x2}, 0x14)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0))

13:24:49 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff7f00000000)

13:24:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  841.669998][ T6127] __nla_parse: 47 callbacks suppressed
[  841.670006][ T6127] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  841.782422][ T6127] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.797904][ T6134] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  841.828798][ T6142] kernel msg: ebtables bug: please report to author: bad policy
[  841.851875][ T6134] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.910905][ T6137] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  841.916145][ T6145] pic_ioport_write: 20 callbacks suppressed
[  841.916201][ T6145] kvm: pic: single mode not supported
[  841.918471][ T6145] pic_ioport_write: 20 callbacks suppressed
[  841.918475][ T6145] kvm: pic: level sensitive irq not supported
[  841.919584][ T6137] kvm: pic: level sensitive irq not supported
[  841.928478][ T6137] PF_BRIDGE: br_mdb_parse() with invalid attr
[  841.945042][ T6134] kvm: pic: single mode not supported
[  841.957580][ T6134] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  841.977249][ T6134] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x10000000)

13:24:50 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffffff00000000)

13:24:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffddc}, 0x0)

[  842.107491][ T6119] kvm: pic: single mode not supported
[  842.109533][ T6119] kvm: pic: level sensitive irq not supported
[  842.116023][ T6119] kvm: pic: level sensitive irq not supported
13:24:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x6009a9a2786468ce, 0x0)

13:24:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="a700000072f150715f657046b07bda5e5cfaab125e47d39640da36e7bdce978e68d7b19d48cf5615dbab64e3be582bdf2e75ad9ac1adc9fb60c63614ab035640ac238d9faaad43ecbbc23ebe194d697cf92af32a81e59a2c523855d0ab8c8323f171c834b20532421933b11615bd25e540af22523b9378166d91e189ea2d2089e8f33ca6f11b3b54df7d352e1430b3d6f4903a7e8573d5832de3031ee929ef909bfd555f3e17b3378a1213b36655c9870aa499c6186dfb9b59963789e7b5df3a89cbf249b88276323387f7f9094b07c6e921859605e83dffcea3c63e1a781903572dfd9f4a1b024c00595e0bb9f267c0629c49a96b2b099b624ec7bb4b7215fe1c12be5e0210c87a4daa05df6457dad1b6623f8e21e591fecc973b84287bf220c8eaa08c723d42232ba374fcd1ebb17a1661d954e951daf0a2674d2e16e368449e62856493f2dd0cc0ca3a963bea176b07c8f707502514450731ddb51225032a37bfb0f66fc9c81d8388cd1e7d9e7ccffb75812a1af692c9a1a645524582664d51eddf5f046d3c2c14a0f1a69598234edadbff83c82daaec1d548f0066e7af2207953ea6a7a21fefabec80ab972dc31cf759"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  842.204065][ T6158] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  842.240757][ T6158] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40042, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x1ff, 0x6, 0x805})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x2, 0x1, 0xc3, 0x8001, 0x194c60000000})

[  842.262751][ T6166] kernel msg: ebtables bug: please report to author: bad policy
[  842.274862][ T6162] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  842.278416][ T6161] kvm: pic: single mode not supported
[  842.281959][ T6168] kvm: pic: level sensitive irq not supported
[  842.289896][ T6168] kernel msg: ebtables bug: please report to author: bad policy
[  842.296942][ T6161] kvm: pic: level sensitive irq not supported
[  842.301434][ T6162] kvm: pic: single mode not supported
[  842.315005][ T6162] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.345121][ T6158] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:24:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  842.359621][ T6158] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.381494][ T6172] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:24:50 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffffffffffff000)

13:24:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x20000000)

13:24:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  842.467740][ T6172] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.482102][ T6183] kernel msg: ebtables bug: please report to author: bad policy
13:24:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xb957, 0x2)

13:24:50 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xcc0, 0x4)
r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x80000000, 0x7, 0x800, 0x3, 0x0, 0x7, 0x180a0, 0x7, 0xc0000000000, 0x6, 0x100000001, 0x0, 0x8, 0x100, 0x20, 0x9, 0x1, 0x6, 0x8, 0x9, 0xbf, 0x6, 0x8, 0x3, 0x97c, 0x240000, 0xe2a, 0xffffffffffff168b, 0x2000000000, 0x100000000, 0x8, 0x5, 0xd158, 0x10001, 0x7f, 0x7, 0x0, 0x1, 0x3, @perf_config_ext={0x100000000000, 0x8}, 0x0, 0x10000, 0x410, 0x0, 0x2, 0x2, 0xff}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x8)
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x400, 0x10000, 0x80, 0x2, 0x0, 0x1, 0x1, 0x5, 0x8, 0x8, 0x6, 0x400, 0x0, 0x82, 0x7160, 0xcb, 0xffff, 0x5, 0x68f, 0x7, 0x4, 0x4, 0x0, 0x200, 0x9, 0x5, 0x6, 0x4, 0x2, 0x4, 0x8, 0x80, 0x99, 0x3, 0x5, 0x2, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x1, 0x7, 0x8, 0x7, 0x9, 0x6, 0x5}, r1, 0x3, r2, 0x2)

[  842.523976][ T6186] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  842.557697][ T6186] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.573105][ T6172] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  842.604981][ T6197] kernel msg: ebtables bug: please report to author: bad policy
13:24:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x3f000000)

13:24:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  842.634249][ T6172] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.659194][ T6195] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:50 executing program 0:
r0 = socket$kcm(0x10, 0x9, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x82)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000001c0)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]})
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000040)={0xaad, "556644f534ba727d22e4a449b63cef961509de671624e57d7a28995e5865de85", 0x4, 0xffffffffffffffff, 0x1, 0x4, 0x2})

13:24:50 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x40000000)

[  842.684321][ T6202] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.685383][ T6196] kvm: pic: single mode not supported
[  842.695005][ T6195] kvm: pic: level sensitive irq not supported
[  842.702346][ T6195] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.746241][    C0] net_ratelimit: 32 callbacks suppressed
[  842.746247][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  842.752819][ T6206] kvm: pic: level sensitive irq not supported
[  842.754553][ T6206] kernel msg: ebtables bug: please report to author: bad policy
[  842.757643][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  842.757724][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  842.765992][ T6211] kernel msg: ebtables bug: please report to author: bad policy
[  842.771462][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  842.771535][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  842.790343][    C0] kvm: pic: single mode not supported
[  842.802035][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  842.821396][ T6216] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.826292][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  842.833223][    C1] protocol 88fb is buggy, dev hsr_slave_1
13:24:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xaf)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:51 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='efs\x00', 0x80, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x1)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000140))

13:24:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x48000000)

13:24:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r2)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140))
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0xf}], 0x1}, 0x0)

[  842.932886][ T6221] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.973708][ T6229] kernel msg: ebtables bug: please report to author: bad policy
[  842.982336][ T6227] PF_BRIDGE: br_mdb_parse() with invalid attr
[  842.995657][ T6221] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  843.017164][ T6236] kernel msg: ebtables bug: please report to author: bad policy
[  843.044487][ T3865] kvm: pic: single mode not supported
[  843.052814][ T3865] kvm: pic: level sensitive irq not supported
[  843.055215][    C1] kvm: pic: level sensitive irq not supported
[  843.066238][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  843.078109][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  843.103047][ T3865] kvm: pic: single mode not supported
[  843.173634][ T6244] kernel msg: ebtables bug: please report to author: bad policy
[  843.194940][ T6247] kernel msg: ebtables bug: please report to author: bad policy
13:24:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
socket$kcm(0x29, 0x7, 0x0)

13:24:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x4c000000)

13:24:51 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}]}, 0x0)

13:24:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  843.296903][ T6254] kernel msg: ebtables bug: please report to author: bad policy
[  843.308699][ T6258] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.326058][ T6251] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  843.343417][ T6262] kernel msg: ebtables bug: please report to author: bad policy
[  843.354431][ T6251] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.415245][ T3865] kvm: pic: single mode not supported
13:24:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a700000072f150715f657046b07bda5e5cfaab125e47d39640da36e7bdce978e68d7b19d48cf5615dbab64e3be582bdf2e75ad9ac1adc9fb60c63614ab035640ac238d9faaad43ecbbc23ebe194d697cf92af32a81e59a2c523855d0ab8c8323f171c834b20532421933b11615bd25e540af22523b9378166d91e189ea2d2089e8f33ca6f11b3b54df7d352e1430b3d6f4903a7e8573d5832de3031ee929ef909bfd555f3e17b3378a1213b36655c9870aa499c6186dfb9b59963789e7b5df3a89cbf249b88276323387f7f9094b07c6e921859605e83dffcea3c63e1a781903572dfd9f4a1b024c00595e0bb9f267c0629c49a96b2b099b624ec7bb4b7215fe1c12be5e0210c87a4daa05df6457dad1b6623f8e21e591fecc973b84287bf220c8eaa08c723d42232ba374fcd1ebb17a1661d954e951daf0a2674d2e16e368449e62856493f2dd0cc0ca3a963bea176b07c8f707502514450731ddb51225032a37bfb0f66fc9c81d8388cd1e7d9e7ccffb75812a1af692c9a1a645524582664d51eddf5f046d3c2c14a0f1a69598234edadbff83c82daaec1d548f0066e7af2207953ea6a7a21fefabec80ab972dc31cf759"], &(0x7f0000000000)=0xaf)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:51 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x60000000)

13:24:51 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
chroot(&(0x7f00000000c0)='./file0\x00')
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  843.468183][ T6269] kernel msg: ebtables bug: please report to author: bad policy
[  843.492645][ T6272] kernel msg: ebtables bug: please report to author: bad policy
[  843.564624][ T6278] kernel msg: ebtables bug: please report to author: bad policy
[  843.574793][ T6283] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.590559][ T6285] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  843.624068][ T6284] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.665200][ T6290] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.701424][ T6291] kernel msg: ebtables bug: please report to author: bad policy
[  843.765549][ T6297] kernel msg: ebtables bug: please report to author: bad policy
13:24:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x65580000)

13:24:52 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x400)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x9, @loopback, 0x1}}, 0x0, 0xfffffffffffffff8, 0x0, "b1ddaf2e0d3b062f3abe98a7d1a120641f4d77cba8f59a861920068e83cdb30ba64798c705dc0461dabd8c826915266d598ec9083352570f33868385554fc561804fdae1308df51aabd1e7407e072d06"}, 0xd8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  843.885417][ T6305] kernel msg: ebtables bug: please report to author: bad policy
[  843.890703][ T6308] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.911848][ T6311] kernel msg: ebtables bug: please report to author: bad policy
13:24:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40, 0x0)
openat(r1, &(0x7f0000000080)='./file0\x00', 0xa000, 0x2)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000340)={0x5, 0xff, 0xae, 0x2, 0x14, 0x3, 0x5, 0x6, 0x8, 0xfffffffffffff2d8, 0x8001, 0xae10})
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d0faba5d5075d3157b97d4b47285f357b1131400f49bb34dfa4360109fa1de0dff63ac810a9b14133e48b2a585ced0d02c2ea64d880eff3d", 0x38}, {&(0x7f0000000100)="ef0513e99c06a96481f0506d5e34da62b57aad32ad81a625f3f987c7a4865bcbee223b9c3ff1d490d6112d236684d20c4cdd5a408368a4b668df034406d2b66212b16e", 0x43}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="2000a15490646cea492d17e963fc0ed102462970e32b5d4e0b3881562f7e03750000480000000000002300000000090000003be64728eaf19211d607d5c150ca946bdb55d94db915941a43893b5bb61d6382b2653069d803ca8c"], 0x5a}, 0x10)

[  843.952679][ T6304] PF_BRIDGE: br_mdb_parse() with invalid attr
[  843.986615][ T6304] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x68000000)

[  844.022267][ T6324] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.045245][ T6318] Unknown ioctl 35075
[  844.063190][ T6327] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.102617][ T6329] kernel msg: ebtables bug: please report to author: bad policy
[  844.113885][ T6333] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.139617][ T6338] kernel msg: ebtables bug: please report to author: bad policy
13:24:52 executing program 0:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x82f, 0xfffffffffffffe91)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  844.140919][ T6336] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  844.187907][ T6318] Unknown ioctl 35075
[  844.210623][ T6343] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.292083][ T6349] kernel msg: ebtables bug: please report to author: bad policy
[  844.305165][ T6351] kernel msg: ebtables bug: please report to author: bad policy
13:24:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, <r5=>0x0}, &(0x7f0000000540)=0xc)
getresuid(&(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0), &(0x7f00000009c0))
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getresgid(&(0x7f0000000840), &(0x7f0000000880)=<r9=>0x0, &(0x7f00000008c0))
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {}, [{0x2, 0x5, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x4, r6}, {0x2, 0x5, r7}, {0x2, 0x3, r8}], {0x4, 0x5}, [{0x8, 0x7, r9}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x6c000000)

13:24:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:52 executing program 0:
r0 = socket$kcm(0x10, 0x7, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x8, &(0x7f00000001c0)=0x2)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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")

13:24:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  844.437468][ T6357] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.456762][ T6363] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.463023][ T6360] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.481810][ T6362] kernel msg: ebtables bug: please report to author: bad policy
13:24:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x74000000)

13:24:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = semget$private(0x0, 0x3, 0x600)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x420001, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x1c, 0x0, 0x10800, 0x0, 0x9, 0x636, 0x8}}, 0x50)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0b1e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=<r3=>0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x14)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x5, @local, 0x2}}, 0x6, 0x2, 0x401, 0xfffffffffffffffe, 0xbe}, &(0x7f0000000340)=0x98)
semtimedop(r1, &(0x7f0000000040)=[{0x6, 0x5, 0x800}, {0x3, 0x5, 0x1000}, {0x3, 0x2, 0x800}, {0x0, 0x6e8000000000, 0x1000}, {0x1, 0x2, 0x800}, {0x2, 0x5, 0x1800}, {0x3, 0x1, 0x800}, {0x3, 0x1}, {0x0, 0x5}], 0x9, &(0x7f0000000080)={0x0, 0x1c9c380})

13:24:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x80000)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x2, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback, 0xffffffffffffffff}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, r2, 0xff}}, 0x48)

13:24:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  844.613717][ T6381] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.646397][ T6380] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  844.658393][ T6383] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:52 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x7a000000)

[  844.686839][ T6381] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.693989][ T6387] kernel msg: ebtables bug: please report to author: bad policy
[  844.712963][ T6383] PF_BRIDGE: br_mdb_parse() with invalid attr
[  844.757564][ T6395] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={<r3=>0x0, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13:24:53 executing program 0:
socketpair(0x7, 0x2, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000040)="762eade8dbca55427fb118d415e3b9c6443da2e9935a3eeb9d03ae99aef11687fdc04d4d9253a6ae4c29e899d4a0eab8803845b82c145155b06ff54e9bf66a0ecae3945cba1be441b08f9125fa36f76719c8160a1289df435c7ef4261a93a3f302a483dee5d38874956ca852ed74d6", 0x6f)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x1}, 0x0)

13:24:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:53 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x81000000)

13:24:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

13:24:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x88a8ffff)

[  845.030296][ T6415] kernel msg: ebtables bug: please report to author: bad policy
13:24:53 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x3, 0x1ff, 0x5]}, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:53 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x9effffff)

13:24:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  845.184970][ T6433] PF_BRIDGE: br_mdb_parse() with invalid attr
[  845.243787][ T6434] PF_BRIDGE: br_mdb_parse() with invalid attr
[  845.265411][ T6439] kernel msg: ebtables bug: please report to author: bad policy
13:24:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:53 executing program 1:
r0 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:53 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2)
sendto$rose(r0, &(0x7f0000000080)="50fc7d6769c11c1727d43b612c87f132c4879316dba45465464c94452fff2ca0e08da866f0c59cb86e517bd63a819d14ba02d11f668f05728967dc89f914793e015979c8975e9fc56e11d8745f112390ca3e4ee9b3e1ab8d2ec5c7ae27b2287908f04030568d5c9c4681afba953f72b5d3059cf7894b123ef6d443cb69a49c9f5d4c25c521697f97f3ea3a73132eafe5d4c157d034336d852731a236d86261528db39402b28ae3e1e7bf55b64b80b3b097121a26c578ae1cf6fb8607397ad915a380ee4d9dc5f254cf2719f97a63f5da2b1c029e12803482a59879be01933df17b60a2b6f9b7a8a4ed1e456613d4", 0xee, 0x8884, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @null}, 0x1c)
r1 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xad030000)

13:24:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffff)

13:24:53 executing program 1:
r0 = socket$kcm(0x10, 0x20000000006, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x80, 0x9, 0xd2, 0x381, 0x81, 0x3b, 0x80}, "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", [[], [], [], [], [], []]}, 0x1620)

[  845.513192][ T6458] kernel msg: ebtables bug: please report to author: bad policy
13:24:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={<r2=>0x0, 0x1, 0x7}, &(0x7f00000000c0)=0x8)
ioctl$KDSETMODE(r1, 0x4b3a, 0xffff)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0xffffffffffff8000}, 0x8)
getsockname$unix(r1, &(0x7f0000000280), &(0x7f00000001c0)=0xfffffffffffffd2a)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r2, 0x9, 0x1}, &(0x7f0000000380)=0x8)
signalfd(r1, &(0x7f0000000300), 0x8)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x100, @tick=0x7, 0x8, {0xfc, 0x3}, 0x394, 0x3})

13:24:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:53 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffa888)

13:24:53 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa200, 0x1a)
openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x100, 0x187)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x92}, 0x0)

[  845.675434][ T6479] PF_BRIDGE: br_mdb_parse() with invalid attr
[  845.735065][ T6483] PF_BRIDGE: br_mdb_parse() with invalid attr
[  845.757880][ T6487] kernel msg: ebtables bug: please report to author: bad policy
13:24:54 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x221}, 0x20000000)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x800)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0x1, 0x6}})

13:24:54 executing program 0:
r0 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x12000, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x9, 0x10, [0x7, 0x0, 0x80, 0xe28]})

13:24:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffff000)

13:24:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13:24:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0xfffffffffffffe22}]}, 0x8080)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x20040)
ioctl$KDDISABIO(r1, 0x4b37)

[  846.500076][ T6509] kernel msg: ebtables bug: please report to author: bad policy
13:24:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff7f)

13:24:54 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x194, r3, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}]}, 0x194}}, 0x4004000)

13:24:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:54 executing program 0:
r0 = socket$kcm(0x10, 0x5, 0x0)
select(0x40, &(0x7f0000000040)={0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0x3, 0x7}, &(0x7f0000000080)={0x8, 0x81, 0x2, 0x2916, 0x8, 0xdf7f, 0x7, 0x1}, &(0x7f00000000c0)={0x7, 0x8, 0x0, 0x2, 0x4, 0xb67, 0x3f, 0xd89}, &(0x7f0000000140)={0x0, 0x2710})
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1, 0x0, 0x47}, 0x0)

[  846.643855][ T6529] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:54 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xffffff9e)

13:24:55 executing program 0:
r0 = socket$kcm(0x10, 0xffffffffffffe, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xfffffff0)

[  846.785523][ T6529] __nla_parse: 36 callbacks suppressed
[  846.785530][ T6529] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:24:55 executing program 0:
getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000180)=0x80)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00')
r2 = dup(r0)
execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='syz0\x00', &(0x7f00000005c0)='TIPCv2\x00', &(0x7f0000000600)='-&\x00', &(0x7f0000000640)='syz0\x00', &(0x7f0000000680)='syz1\x00', &(0x7f00000006c0)='syz1\x00', &(0x7f0000000700)='.vboxnet1selinux\xd5\x00'], &(0x7f0000000980)=[&(0x7f0000000780)='\x00', &(0x7f00000007c0)='syz0\x00', &(0x7f0000000800)='vboxnet0.*\x00', &(0x7f0000000840)='syz1\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='TIPCv2\x00', &(0x7f0000000900)='syz0\x00', &(0x7f0000000940)='TIPCv2\x00'], 0x1000)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="573b38ae10c1d6cb04a226ad7852be525dfb629cabb848d1be92b36880d573f6e2f2833c2fd277197e4d3943847b6c3aa8392767a6222423c112a98c31de74d75b", @ANYRES16=r1, @ANYBLOB="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"], 0x154}}, 0x40004)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="060f26bd7000fedb00001501e6ebc20c85460522253f2cdfedf10000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4)

[  846.884380][ T6529] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x40030000000000)

[  847.006404][ T6553] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  847.075798][ T6553] PF_BRIDGE: br_mdb_parse() with invalid attr
[  847.124339][ T6515] pic_ioport_write: 16 callbacks suppressed
[  847.124344][ T6515] kvm: pic: single mode not supported
[  847.124350][ T6515] pic_ioport_write: 20 callbacks suppressed
[  847.124352][ T6556] kvm: pic: level sensitive irq not supported
[  847.144285][ T6556] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  847.159527][ T6556] PF_BRIDGE: br_mdb_parse() with invalid attr
[  847.166641][ T6557] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  847.196532][ T6557] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:55 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x40000)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:24:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:55 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0xf0ffffffffffff)

13:24:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000040)="e88d1ffb8b0d069f322f88095337aeb662f879c09b6b08672ed7b423722af2c8b78c51b186017d9f81828f52e020480c9f44b53709862c1d96013d498ec67fd42c21e5f1adc0f7e20c67e47b1e2439faa30cb24187d0dd8931c748af7c26d0617450d493d3aad6a6c20d5eb1ae426c155252a64b52198452a70f4c0b568fded0f17678438695b108523fbdd302acb6c505b98c3a97df4cc04ff8de9aa4e59f7a0887cd79e7b33ba026f1d1a3611b3f167252ac2062f66b177c3874f1f7", 0xbd, 0x40000, &(0x7f0000000100)=@in6={0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}, 0x80)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  847.336819][ T6570] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  847.377801][ T6570] PF_BRIDGE: br_mdb_parse() with invalid attr
[  847.401716][ T6563] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  847.402161][ T6572] kvm: pic: single mode not supported
[  847.408777][ T6572] kvm: pic: level sensitive irq not supported
[  847.428082][ T6563] kvm: pic: level sensitive irq not supported
[  847.433388][ T6563] PF_BRIDGE: br_mdb_parse() with invalid attr
[  847.455596][ T6572] kvm: pic: single mode not supported
[  847.720081][ T6577] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  847.730273][ T6577] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:24:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'vxcan1\x00', 0xf93e})

13:24:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x100000000000000)

13:24:56 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x46f39932, 0x501000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f00000000c0)={0x0, <r1=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x3, 0x8}, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x0)
bind$bt_sco(r0, &(0x7f0000000180)={0x1f, {0x0, 0x5, 0x5, 0x8001, 0x101, 0x5}}, 0x8)
sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
connect(r2, &(0x7f0000000280)=@ethernet={0x6, @remote}, 0x80)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3ff)
syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8c, 0x101000)

13:24:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffff9c})
getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000100)=0x4)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x80, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x8, 0x0, [{0x7, 0x100, 0x1, 0x6, 0x9, 0xca09, 0x10000}, {0x40000000, 0x0, 0x4, 0x92cd, 0x1c85, 0xf3fb, 0x2}, {0x6, 0xffffffffffffff6e, 0x0, 0x6, 0x800, 0x1be, 0x4}, {0x80000000, 0x80000000, 0x7, 0x42598000000, 0x8, 0x0, 0x7}, {0x0, 0x9, 0x4, 0x8e19, 0x2, 0xff, 0xffffffff}, {0xb, 0x2, 0x0, 0x5, 0xfffffffffffffffb, 0x5, 0xffffffffffff86e1}, {0x8000001f, 0x7fff, 0x2, 0xfffffffffffffffc, 0x8, 0x6652f48f, 0x800}, {0xc0000007, 0x5, 0x0, 0x2, 0x4, 0xf1f, 0x6}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  847.805448][ T6585] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  847.868649][ T6585] PF_BRIDGE: br_mdb_parse() with invalid attr
[  847.888413][ T6583] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  847.899383][ T6589] kvm: pic: single mode not supported
[  847.905910][ T6583] kvm: pic: level sensitive irq not supported
13:24:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  847.907847][ T6583] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x200000000000000)

[  847.941418][ T6589] kvm: pic: level sensitive irq not supported
[  847.948161][ T6598] kvm: pic: single mode not supported
13:24:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:24:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  848.341106][ T6611] *** Guest State ***
[  848.352238][ T6611] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[  848.373181][ T6611] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  848.383382][ T6611] CR3 = 0x0000000000000000
[  848.388370][ T6611] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  848.395361][ T6611] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  848.402513][ T6611] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  848.410721][ T6611] CS:   sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000
[  848.411508][ T6611] kvm: pic: single mode not supported
[  848.419815][ T6611] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  848.421922][ T6614] kvm: pic: level sensitive irq not supported
[  848.423993][ T6611] kvm: pic: level sensitive irq not supported
[  848.425396][ T6611] SS:   sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000
[  848.455224][ T6611] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  848.455718][ T6611] kvm: pic: single mode not supported
[  848.465323][ T6611] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  848.479844][ T6611] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  848.489020][ T6611] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  848.498083][ T6611] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  848.507338][ T6611] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  848.516434][ T6611] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  848.525297][ T6611] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  848.532853][ T6611] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  848.541429][ T6611] Interruptibility = 00000000  ActivityState = 00000000
[  848.548775][ T6611] *** Host State ***
[  848.552869][ T6611] RIP = 0xffffffff811b37d0  RSP = 0xffff88805bd2f8b8
[  848.560042][ T6611] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  848.567570][ T6611] FSBase=00007fe0cc3bd700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000
[  848.576542][ T6611] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[  848.583368][ T6611] CR0=0000000080050033 CR3=000000008bd8f000 CR4=00000000001426e0
[  848.592583][ T6611] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360
[  848.600429][ T6611] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  848.607719][ T6611] *** Control State ***
[  848.612094][ T6611] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca
[  848.619981][ T6611] EntryControls=0000d1ff ExitControls=002fefff
[  848.627632][ T6611] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  848.635449][ T6611] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  848.643278][ T6611] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[  848.651276][ T6611]         reason=80000021 qualification=0000000000000000
[  848.659399][ T6611] IDTVectoring: info=00000000 errcode=00000000
[  848.665750][ T6611] TSC Offset = 0xfffffe37232596ad
[  848.671362][ T6611] EPT pointer = 0x0000000099b3201e
[  848.682689][ T6592] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
[  848.696913][ T6592] PF_BRIDGE: br_mdb_parse() with invalid attr
[  848.708656][ T6593] PF_BRIDGE: br_mdb_parse() with invalid attr
[  848.714824][ T6602] PF_BRIDGE: br_mdb_parse() with invalid attr
[  848.722315][ T6615] PF_BRIDGE: br_mdb_parse() with invalid attr
13:24:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  848.986260][    C0] net_ratelimit: 26 callbacks suppressed
[  848.986267][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  848.997734][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  849.003495][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  849.009273][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  849.015096][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  849.020893][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  849.035750][ T6600] IPVS: ftp: loaded support on port[0] = 21
[  849.066679][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  849.066725][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  849.284947][ T6600] chnl_net:caif_netlink_parms(): no params data found
[  849.306269][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  849.312044][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  849.321620][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.328789][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.336436][ T6600] device bridge_slave_0 entered promiscuous mode
[  849.427203][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.434232][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.442480][ T6600] device bridge_slave_1 entered promiscuous mode
[  849.456653][ T6600] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  849.553122][ T6600] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  849.569540][ T6600] team0: Port device team_slave_0 added
[  849.575764][ T6600] team0: Port device team_slave_1 added
[  849.728546][ T6600] device hsr_slave_0 entered promiscuous mode
[  849.776471][ T6600] device hsr_slave_1 entered promiscuous mode
[  849.923683][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.930753][ T6600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  849.938087][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.945111][ T6600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.973453][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0
[  850.072900][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  850.080760][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.088282][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.096079][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  850.106674][ T6600] 8021q: adding VLAN 0 to HW filter on device team0
[  850.117249][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  850.125463][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.132510][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  850.140573][    T7] device bridge_slave_1 left promiscuous mode
[  850.147153][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.206662][    T7] device bridge_slave_0 left promiscuous mode
[  850.212763][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  852.827645][    T7] device hsr_slave_1 left promiscuous mode
[  852.880665][    T7] device hsr_slave_0 left promiscuous mode
[  852.928735][    T7] team0 (unregistering): Port device team_slave_1 removed
[  852.940252][    T7] team0 (unregistering): Port device team_slave_0 removed
[  852.950119][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  853.011436][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  853.109443][    T7] bond0 (unregistering): Released all slaves
[  853.248627][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  853.257335][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.264364][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  853.284226][ T6600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  853.294664][ T6600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  853.306611][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  853.314973][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  853.323254][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  853.332121][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  853.340569][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  853.348853][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  853.357305][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  853.365425][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  853.373698][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  853.381501][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  853.404892][ T6600] 8021q: adding VLAN 0 to HW filter on device batadv0
13:25:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:25:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x300000000000000)

13:25:01 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x7)

13:25:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:25:01 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

13:25:01 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  853.478212][ T6635] kernel msg: ebtables bug: please report to author: bad policy
[  853.492776][ T6637] kernel msg: ebtables bug: please report to author: bad policy
[  853.534241][ T6643] __nla_parse: 3 callbacks suppressed
[  853.534250][ T6643] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:25:01 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  853.584364][ T6643] PF_BRIDGE: br_mdb_parse() with invalid attr
[  853.610705][ T6644] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  853.640608][ T6644] PF_BRIDGE: br_mdb_parse() with invalid attr
[  853.642349][ T6647] kvm: pic: single mode not supported
[  853.646802][ T6655] kvm: pic: level sensitive irq not supported
[  853.652992][ T6655] kernel msg: ebtables bug: please report to author: bad policy
[  853.670196][ T6640] kvm: pic: level sensitive irq not supported
[  853.670619][ T6640] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
13:25:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:25:01 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  853.675879][ T6640] kvm: pic: single mode not supported
[  853.692777][ T6640] PF_BRIDGE: br_mdb_parse() with invalid attr
[  853.719348][ T6653] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'.
13:25:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x400000000000000)

[  853.771265][ T6653] PF_BRIDGE: br_mdb_parse() with invalid attr
[  853.806068][ T6666] kernel msg: ebtables bug: please report to author: bad policy
13:25:02 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  853.822622][ T6644] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  853.852820][ T6644] PF_BRIDGE: br_mdb_parse() with invalid attr
13:25:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:25:02 executing program 0:
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  853.891970][ T6669] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  853.891981][ T6669] PF_BRIDGE: br_mdb_parse() with invalid attr
13:25:02 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x80000)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x8}, 0x4)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

[  853.971199][ T6672] kernel msg: ebtables bug: please report to author: bad policy
13:25:02 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  854.056700][ T6672] kernel msg: ebtables bug: please report to author: bad policy
[  854.085584][ T6684] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
[  854.161521][ T6684] PF_BRIDGE: br_mdb_parse() with invalid attr
13:25:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:25:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x500000000000000)

13:25:02 executing program 0:
r0 = socket$kcm(0x10, 0x8000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:25:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:25:02 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

13:25:02 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x400)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x1000)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x1)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080))

13:25:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  854.339220][ T6705] kernel msg: ebtables bug: please report to author: bad policy
[  854.363089][ T6701] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'.
[  854.404905][ T6701] PF_BRIDGE: br_mdb_parse() with invalid attr
[  854.424941][ T6704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:25:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:25:02 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080), 0x0)

13:25:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x600000000000000)

[  854.459816][ T6704] PF_BRIDGE: br_mdb_parse() with invalid attr
[  854.483645][ T6716] kernel msg: ebtables bug: please report to author: bad policy
[  854.493605][ T6704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'.
13:25:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  854.558029][ T6728] kvm: pic: single mode not supported
[  854.558487][ T6728] kernel msg: ebtables bug: please report to author: bad policy
[  854.560294][ T6717] kvm: pic: level sensitive irq not supported
[  854.561222][ T6704] kvm: pic: level sensitive irq not supported
[  854.586742][ T6704] PF_BRIDGE: br_mdb_parse() with invalid attr
13:25:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  854.660399][ T6730] kvm: pic: single mode not supported
[  854.671607][ T6730] PF_BRIDGE: br_mdb_parse() with invalid attr
[  854.732086][ T6737] kernel msg: ebtables bug: please report to author: bad policy
13:25:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000004c0)={0x6, &(0x7f0000000480)=[{0x5, 0x81, 0x6, 0x2b4e}, {0x800, 0xf0, 0x4, 0x40}, {0x3f, 0x7, 0x9, 0xfffffffffffffff8}, {0x0, 0x4, 0x10000, 0x2}, {0x8001, 0x3c7, 0xb8e8, 0xae}, {0x200, 0x800, 0x81, 0x62}]})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000380)={0x0, <r2=>0x0, 0x8})
connect$bt_l2cap(r1, &(0x7f0000000540)={0x1f, 0x5, {0x6, 0x5, 0x500, 0x1000, 0x7, 0x6}, 0x40, 0x7}, 0xe)
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x188)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000400)={r2, 0x80000, r3})
accept4$vsock_stream(r3, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80000)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000340)=',wlan1md5sum\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x71, 0xfffffffffffffffd, 0x8, 0x4, 0x9, 0x587, 0x3bf, 0x1, 0x6, 0x80, 0x400000, 0x0, 0x1, 0x3f, 0x2, 0x3}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x40, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00')
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nullb0\x00', 0x220, 0x0)
r7 = getpgid(0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000002c0)={[], 0xffffffff, 0x8, 0x1, 0x6, 0x100000000, r7})

13:25:03 executing program 1:
r0 = dup(0xffffffffffffff9c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, <r1=>0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0)

13:25:03 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000080)="ba3b3c4894085ab914b685091d15dbeab933cd13761d1d4c7e03b8de3a0fdcefe4ed978203965a6f272325793a2e570f71d2a2ff5223ca87813a53991d333559313b26b59619fb0481d2b9cad5208fc7938fdf20f7e7ef6a", 0x58}], 0x2, &(0x7f0000001280)=[{0x68, 0x11f, 0x8, "45f6a08cad3242cb272f103d0cb527d93b1bd270af6ae6cc914a2a195b28c48fc9e390a1cea95fe240c1ed4747d62f5f9bc908e62aba2098152c6f3e8b8028c2c412e3c54ea9470f332974db413967f5b2eaced9936395"}, {0x1010, 0x0, 0x1, "13f362cf8b0edbc81297c85ff4d13813a25e7f20b4d633e7881a3a3b9c620c5ab2ce4470663e1e5074d976d5726be0c601bafcb8e164285104b6ba2e705f463950439601989263cade0fb4243291e616c02f438d09903978be6ddb85778aa77a020264920f13a2d641789224ea6b22d5f5bb93fc080aa18aa126c12ab0f83228a4c2250b07bb4b64c9127e48a593cf91bd79a7233e6d0df115cf5bfe032068880077f801b448f962c74367e8af9545403c9671bf4e31c6ea9e19ff45de614f47573620cf54e0493db712b563f7060cfa8e9d5d85261d3f3cfbc3d5f421b5db78b10b9b2afe60498d0d12329a616b1c81de618b5c42b3243c20ca106d31f6624b294d7c5d63d3c8995564acf823312fd799f3cd206041aeb0019119a5812d429b0555238689a9a40984ff83e365c089f694c01c1dd3dc5d7c224ba62771198e6dbab285588be0de312e618a6c3b6d98c037326402d3f8cbc55481aa638a8e5bc475154c32bd5a6fef8cc08060452c3e6fbf7100d2a33001a08c5a58182386b50e250e81c18896a1462f0760975b875c62ee988debdbc43906bc844eba913a9b294bd22f2c2c5c82e8dccf032812793e85d57f7bb0e0ef58d652ab31fe6ab22ba0af64b99639895f1df910eba24431841acfd870746871137f97e84ddc188d2008fe10701650fc3dcf038f53b515199ccae2c2865fcb979f3f320058bc50a5c261787eed398f847f4c6b30071c2259d09e67fbbe2cc8499f5ae4807d0820e8c1f9ba29949ccabf23ee72efd9607bb08dde640e3c4d40aa42b935f33d0f648e834e0977866ac61beb91a59726e760d90e4158898b19bc216df4ea2c33c6d115bdacb49a01f011afc1dd5c1de19f35c3a2fd22f5350009f041f70ac6fc1dc25187f13e03e16711c180767a022fca83044db7c921c76325b0e7a5fde936d1f7a1c0ada5859a257e3e8e171571a8804c77505c588f5f39bc66d54156b8557ab2b9f3418839128ac483c59a4ee5cf1c6a8d88215b4361c2a1da140143bb3a9c9a765929ddf5e47830b4d6dd911531f26fe81fdd81a633af845dee539e5e8d56d67da29d42dbc43ba8c5fa668399e8085196e5fff7ea3e3b6a556f1d656b76e57e72a127d488ca130d1187566c9ae4750e2de24f9618afbbb909fc1eb247e4fa1657283ee900393aae89374fcb678d9e7a800f61af94d4c81deb570c5bb60458ddc325388ed5e6efec85bac358972556f801ec569f81ba6231bf5fc26e76c262cd785ea753457cbfaaadf9c5f68ea961dd4c481cb15a21b5436f3ea2c1202aa1e3127208694e7a524304e116078756713f9062f8df0a886e1e4a04e399c0d5330fa73cc671a5c11c932c556101d7189aa7f129b3b2890bb5bac52452f4a7fdf3a31f9cad30dd04e95943214309a4539623f7d848c26ae1c03d6abb9361e0d0c22d0b116bb0b0d3600b0746ca23a2879fcf1403771cbd8ba52a009b4c12b59853bb7d379563b18177c5ca73692d510eba16028c700045fc338521911f3fb976fd032e35e15f072f00b7f7d9ffad05fdf913b2220b01705f04d24ec96a502424de433de288e09dce634c9d38c33c63d227b1ae618d334d01ae398bdf9f44d69f453eb9faa77f341e852254aed2b247d73e125a56c3b68f93bc69ed662fb8339d0eef609a519437c5e8d12f00e439e7078b7bf254cb91f5683673b1f8cb423a4e2786fc3c1692e1fa991de02761007a600af6b1a55ebca7a5ca0dd5235f27fdf4dbec2ee268b794f01c773a3b9e55247181f8f1d665cff7402a9940e91e2d3f754b38e4a47ece5c9060ffcc82d1040a601c3a7e676afa0fea90c6e0489c83781c3a59c3558bb02f484f28f09aea32e2d202e0439f92d8c4742252d9cbb62568eea931702b6a66e4be2de85bfe223470ace6e5230cb68892b6b35da64b785e3b5cd376b54f64e6c6ab08caccb44d04382c7575293cd9721ed939b9bcba9e2fb248509952d63615fe600fc0c0e14c39284bad73210891bf2fefd78e1e73611a9642ed953b983fc4efca4246a13d329746d2188fffc24ae66800e3d4293b5c9a3e3fe54ea02ae2a078e454bb2e745062689146297352dc984d432b597da396d7c3dd2d825559f8a438665078079b19eed15fd228344b93c3d84a348cb5ddfcbe7fc555946bfa40b4494a842e7b57f1a683b1b5db9adc848856cbaeaa03af1b91d93d6fc47645d90fbc2c7ebc1c4249739b13c32b82760815bce402154d428f9130d575227df1d070ddaecd66731dd45b78fe11a00ab8eed448a5fb97a3ee60030532d9f1f68ebc675bf2c2baa4716e1ae6db2be77a2c6c22726bd6086518c7029c8be8f3acbea08bf4969e042c25e8ef3d6d5f5326c3d67b1231e53051df2005b0254fdca8036898ef2fa7cf681e2166178f559fb7479ab024f39c90100b8d57bb2516557188a2e7b5cc4d800cec77bf6d66f193b02d5e30a2271de09bcdb82602aed000231bd210b7d26680074f55deae01f087d8190f8738f5cf3dde36544d8be04e33c285dfcb88c11b638c9a17e4c60b4048e8368b351c80bd3527479a2cf4ab38b117b16f6583f0e98ed165b096f1e3342169d50180b5873953df7c69476877fff20deb2d9d06d95b3d51eb97b303b1ce66f9e3c0c8b107480e4f924a14d1c336f64488874b65a8a4c71974f26b63216d57596089cc52ebb9a20241f4e7362034ef3d05dd9b6ac194c6a3504aa9d49f6c2b933f9765ff17e877d0e34a50dee69ed07f902abb393f1a402f741491b1960a72e95f8bfb4fa28d4d1ae07c5cc3ea060bee1b2d605b2cbe68455e0fc584319a40924bfbc1c0ee86093baa1c2a08beff436ae6425c90b1e7dec2e707e072b021f109b4db02ff8f6184f46869eb209b972b2018ddfe517a3c707a11ce9a20a36f4ef50c6c48cb6b95449ee9345624ab59e072cbd60319713cebaa77aa02bd3bd4ac04f44abca9af496631683c73731e668a7a617a3ae605ff40eff96a3ba63a9f333da1ae06e73a65111b4eaa17785945396039970a123636c4654138cec5869fd1d2c811dd161352a8773506cba9d3e6e39c327045f9d0a7d5e44cb490fafa4bb765461b997f6cd7e10932e17b7e4ac2e91d63b07413cd7d5c94a43ec34ef087a8896d65726035d6bd2f8f7719c48b880100a6c6e6ee115d31be89fa6238efd280375b3e9fcb313523810c61ac516c2547fe32d6ef585ef2b22f249a5a98681126074061558e76e139bee3edb706c18cc9f5714dca31a65ec9a216cf807b753b4e73bac802f2ee0a4d7b07688ac037f9e1d698f4211419eca13116a8a2bc153f0a0ed0fb792b3751d7b9629eacb08d3bf8c7d704018f0f2f51b68746eb7563a63ea389e9b230b543de774346f61bf56d62b91c6d37c7029df2ab32337022b8a12e6fec6eb48acf6b5d0b006d2d7afe37b782422e94ceffa2240d28cbf8afddf44fb99eb225cc332486514e941d07f9ec59a393e32172dbaa29cca1e5e52c4db1bbccde2b617c5cdbcdeedfb90f8785e6cc3110b8ca1a05fcf03221fbdb3b31e3e162897318d2a7b46072b27030836dde108614f6a8615ff8d873ccb5364cbd98b8879598d60640d6c2967a747841363891b731fb9b94a8b711aed2749e4d10337629806c9c6cbef479a91f73936b81802a6aa01a232eb0564fab8bcdedbc5b778b2cd159b4109b22284c4d40b060bb59a9f0512d8c2a121513bfc043105cd17f44ada2d90490f09324ba207266870c8fc65681873b2d6d26bdef46de679a8b44636f266539a25c463cdbe088571c7c9913f946f08826c6bb16d5b5022a684faa3cabcdfed7431766d48c4a9c3f1715686eb133d9982bcb741380bc8a3b57a72d29fb5199ca5cd7ecc57777b85d3e728612f464e83e97b220410e27ae7f952656b99442eecfde6dad742639eda4af21158013d2cf6ce9797d99ac27426a2ace254456a1ae75153941010a554734800ea7b51c370aaca3839d6a67d43dc368c8dfc2ff1ca45cd06b66e6a026ec382ad511341cf0675baecaf0b203a382ab823d01b885a840e65564d4d75c0c381f59e1a276be02c1b112024d514ce7a7d91971e261ea52a6bc020c4cd3f7ac7749d1e99b74b5fa6c0aaaefba363a89a1eddcc25a02801f83792937baa2c558d09e9e936c1bfb63477a528ffe78528382446d5c86a8e4f4bf1bbf789d75787462b2b8a3477113afce8de673691c5cd33511a3bd540bf89ae5094e6ea9ec56c7b2a630c509e746688861cdf9c998f8aae8db16dfa0f6ff6219720e03102b417b54287dcdddd8fbc3d6bcce8192ba9cf2319d82a471cf1fc5f79b9f0d00cfe841444a641628c8d83ac32051bf620da2f03a738132ca7494489986087e518c4a21e4c5494f9410d2b7e7bf61cd5c99089b01276a0db673be8f093903622a636573d40518614d88cd7b50a2464e3c48a3114284dcf19a290c57d8c7f2e9c5e3ccc15fe80f51039993e5ed3b64ba1dfba66b4bc559055fc4f52297d9c99e696355ad1d0c6f5dedc5a39b43b22a8087662d93458cf9151f98ed5517571575b74bc59334e200c70677f91281ea2ed58c5d35bb84be8438e7f414ecb35f7e7a97233dce39bc1d3383ab8d7fd51277742c9932352e4c317528780daba12bbe1436a57980020458b0f3993cf0eb3f39c919e6e143a6bd77280988a6f99a19d434561e04383149b3ea122202f85e23671421808b727c9cf19140231971051ff73d85da855b4d78e60744bed87c86303928bf5fb4f8a07aeb9f082952c186c62c0e4182d2f640b1497f8eca468dfcf2b380fcd68ba8deffd43da5a32a7bf166dc874f479dea45c39284a7b66116037c4b90542db80984c8b1ef1402b63741bea6cba0be2192a4759a6b397cb55c7d45a3ba516c07d7599f4a7116726ee4829816fe57e37365b29f6e9c8cdd9bae072a5a62c603326d6c4d54e328f0c9a0ce84f77ba98309ad0556a820ac9def80f75e4f38b0d2addfbc167f783504ca10f9ff4a3117f2f202d3ccdf9e9024db5525f4bbbc8c8828fcc56f61de59d88efc0baab7d73f925a44f65f60bf991c387587818d3e51b2f23a4ad50707f60abce802ac91110078483e18ad61fb79878ca2d3d219c1d67d846d37645786fd4421f1ef94344a5401db08201e47c97803ec297e5548bec9de740493c255ba4ead903e299c00b450e417d0f24216fc067ddded9c42263e95f237d75ec7f55df83bfffa9c0cfa9c1c9e4e9ccfcd1745ffe6ba9ef6a38b0364a95a23ba0e8351dff70cbe9581a8ce1eb6dfdbdc720097f9e4eebf87c8e65346fbf5b5ea8f9008c698347476fa13204693c492567c9f577cbcd6b7db333e15764fee54725f5c08e5a1c0865ac1fdb89b0680caec2b736c3ed99f0dc3237fd2984585378fcde2ff367d7af3ad3b697208511b5ddec537675653ea0fe73a804434754edf027b9748b3ae09ebd405fb25618e812cf767088bb2838a92fb7921bdaa32ad768a4a228a7387332ece91e64f6650fe87718f154a203a340c31295e4e30364481c6984651511efd864352899eddce17a64d46ad68dc51a5ee6190b02135dc56946de4d456201fefe30d9480ab181a4e855044ce3a1bd0b8852bd635bafcd097ef16ba6d206e52a8416523b1cd85379f9ad4048e111c258508b04901a4a4a95ebddab0afa63b235fdf256350369ae4e63a797d1337bf27ae38f0c18a674dff9c495b076bb35933f3187582fedfd397e292c90dca95849afe3eccfe7b4e24a3ded96a369c8adfacbe22a6d922d7b60baa38d6fd6a6edcd22c811d"}, {0x68, 0x118, 0xcef, "1ff3b993deb529c73d225336ab9b43e6a32f0049243dacf70f6e3d4277e03e8f7d94839145ab38b09c3581436ae9b3af4fdc5922894e73d88f4cc3f6d36e6e22af363fb7e9009de18b7a3be02757e06e8a938407d091da51"}, {0x58, 0x11f, 0x2a7, "cedf4ddeacc2c3b5265557299d8786eaa8cbcc7e3dc2a81a5f208abbd7d9b70d5e84e5235a7c2696ade27bacf93b325d29beddbeac63aea4b1fd5288bc7a5100f0"}, {0xb8, 0x3a, 0x1, "e629d1bc45026eda0b73be214a44eb5da7059c9b6c17724c6b9a13d2eabb018563882eba9da14d5fa98d905894bf75cc9905047fbb4b6acd966ecd6b45ea8d2d68d3abc195c7670530061146a27b3028e4c33bcd15044b8b251c2fd7cfecd2f32b79b69295b392b380e5a72a89c147dcd9b278da5a69b6e41e172f8b57a71118447d35d4c44f25691f3029428a948bfc56c5f3ed2b892e3bc4c10dbf1d7a382d34"}, {0x88, 0x0, 0x8000, "688a03f5f269d2fc00c983e00127fd2c3522bcb04be346f3a5ba635953d411da91549c76bca72724f915fff3ec07b249f4d178ae51c000599f5054afd60421e1c0791f4cc049c3a089790b929b2e649bc43e54d2322edf51e735d447cdd514fc1e90a2f7ba0078570c8ad1a9f5dc2b434c207aa55a"}, {0x20, 0x10c, 0x80000001, "6dce0b9a27c98fa12f5e7ccf13"}, {0xd0, 0x11f, 0x8, "ceac90a83bc4c74cbae63a12da9fc557b54a3763069876e36085281c70ffe4590f484d52eab1c7c35c495ba37d28371ae3e5f6883d95017c905244910640c3cbd5513131c9e8ce4f286dabc2b99446f25cab5f9232bc7291847c995e318e93e4b5c653fc2f61f5723683a02852bb56aebd78bf8cc7afed02d7103e77aac16f7ebb81bd7bcef560e818c83610a31608a3b16afc1aa30f4e4cf4ea1bcc846e159b3df201ded1168fdc3b3b3ac7a7341d6097a6e9900afa9e9052"}, {0xc8, 0x100, 0x100000000, "e0056bb0484f92b61522267a98d7b145e6f9205788fe41b4569d27329ed35dac4104613151549911ab6ab6163a69ebe5f0e97b05d55a26b9600d1d2832c13dbadb13a22ebdb5c34a19b13522cbcacedc4a21ee9908ffe8a9ece6128378ff8e22c1ad9d127fcc9d9b69db9af82cfa044ed74e39f67df9eaa90327b6c87377a46b54d69b06fb4c9daf5e9cae91361b3cbf5e32bc7911bd3512c8e99b5839fe2790ba167fae5f9981e4ea57abc3bb84b225f05bdbab04cb37"}, {0xb0, 0x88, 0x80000001, "6165dc3279f55bc9d99f091329cf93127396bcdd175c79c34732e53bff8816f9d442391f734907492f235a5b6c390b0629bf47b8f2b137b3c395d5ff30ec86fd64718c53ef9ebec8d603619d2ff3682ce9b2a3ee0af60f69f73754292c4dbba3a1477c811340a742a5da7c93a4d65a92c4618af1a5edc0816ed8f7fae20b32b0333fa55ed4324bfc3c81c4f700928d0e41827fa4ea9892e7874a1ee95a71d304"}], 0x14e0}, 0x10)
sendto(r0, &(0x7f0000002780)="1b253a9e32f3212e249add4d6307721de3e861bf0d9b1a077ff7c9617d546585c619ffc855b899c168567c3ec7c37783257e765f4bd010b18d4150a270622d2830fadf3387b6f1e3cfb1ba0c08d69dd6b81e38f4606fb45b13ed84e3cfcf779c6a1cf2b721c380351f94aff03b44f2b761619b0468a0d0f1c0b6a4dd45cd3144898b58bed27ea5d89b2de5e9ad589c9b01785f43e8e0446d8e61810d958cf89b74ff3c81cbca99602e4791841f18fde9c914027adafeae0d180ca9a25144cf5d0aef9532974e98", 0xc7, 0x4040005, &(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:25:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:25:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x700000000000000)

13:25:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  854.923561][ T6748] PF_BRIDGE: br_mdb_parse() with invalid attr
[  854.937392][ T6752] kernel msg: ebtables bug: please report to author: bad policy
[  854.952978][ T6756] PF_BRIDGE: br_mdb_parse() with invalid attr
13:25:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

13:25:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1e2, 0x1, 0x0, 0x2e6)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13:25:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x800000000000000)

[  854.974324][ T6761] PF_BRIDGE: br_mdb_parse() with invalid attr
13:25:03 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x8000)
ioctl$KDSETLED(r1, 0x4b32, 0x43cb)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:25:03 executing program 0:
r0 = socket$kcm(0x10, 0x20000000006, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x20000)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4400, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0xffff)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140))
bind$ax25(r1, &(0x7f0000000080)={{0x3, @default, 0x2}, [@default, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0)

13:25:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000001000000feffffff0000100000000000000000000000000000"]}, 0x108)

[  855.059088][ T6766] kernel msg: ebtables bug: please report to author: bad policy
[  855.094719][ T6774] PF_BRIDGE: br_mdb_parse() with invalid attr
[  855.139178][ T6760] kvm: pic: single mode not supported
[  855.141683][ T3865] kvm: pic: level sensitive irq not supported
[  855.162859][ T6773] PF_BRIDGE: br_mdb_parse() with invalid attr
[  855.207414][ T6760] kvm: pic: level sensitive irq not supported
[  855.211040][ T6775] kvm: pic: single mode not supported
[  855.218995][    C0] kvm: pic: single mode not supported
[  855.226323][    C0] net_ratelimit: 30 callbacks suppressed
[  855.226330][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  855.227501][ T6784] kernel msg: ebtables bug: please report to author: bad policy
[  855.231791][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  855.256601][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  855.262359][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  855.262442][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  855.273918][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  855.274285][ T6786] kvm: pic: level sensitive irq not supported
[  855.275658][ T6786] kernel msg: ebtables bug: please report to author: bad policy
[  855.295139][ T6775] kvm: pic: level sensitive irq not supported
[  855.299455][    C1] kvm: pic: single mode not supported
[  855.306387][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  855.317614][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  855.684600][ T6793] kasan: CONFIG_KASAN_INLINE enabled
[  855.702946][ T6760] kvm: pic: single mode not supported
[  855.705155][ T6793] kvm: pic: level sensitive irq not supported
[  855.706295][ T6793] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  855.736477][ T6793] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  855.743436][ T6793] CPU: 1 PID: 6793 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190131 #23
[  855.752351][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  855.762404][ T6793] RIP: 0010:relay_open_buf.part.0+0x7cb/0xb40
[  855.768462][ T6793] Code: c1 ea 03 80 3c 02 00 0f 85 4c 03 00 00 49 8d 7d 58 4d 89 ac 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  855.777170][ T6760] kvm: pic: level sensitive irq not supported
[  855.780550][ T6793] kvm: pic: single mode not supported
[  855.788047][ T6793] RSP: 0018:ffff888051f978b0 EFLAGS: 00010203
[  855.788059][ T6793] RAX: dffffc0000000000 RBX: ffff8880992e9a00 RCX: ffffc9000ae33000
[  855.788066][ T6793] RDX: 0000000000000008 RSI: ffffffff8170edb0 RDI: 0000000000000047
[  855.788085][ T6793] RBP: ffff888051f97928 R08: ffff888054f7a340 R09: ffff888054f7ac08
[  855.829353][ T6793] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c08a040
[  855.837336][ T6793] R13: ffffffffffffffef R14: 0000000000000000 R15: 0000000000000000
[  855.845294][ T6793] FS:  00007f8db8fd2700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  855.854217][ T6793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  855.860789][ T6793] CR2: 00007fbc1c014190 CR3: 00000000988ac000 CR4: 00000000001426e0
[  855.868767][ T6793] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000
[  855.876726][ T6793] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  855.884694][ T6793] Call Trace:
[  855.887992][ T6793]  ? kmem_cache_alloc_trace+0x354/0x760
[  855.893538][ T6793]  relay_open+0x523/0x980
[  855.897871][ T6793]  do_blk_trace_setup+0x414/0xb90
[  855.902889][ T6793]  __blk_trace_setup+0xe3/0x190
[  855.907741][ T6793]  ? do_blk_trace_setup+0xb90/0xb90
[  855.913098][ T6793]  ? disk_name+0xae/0x110
[  855.917430][ T6793]  blk_trace_ioctl+0x170/0x300
[  855.922186][ T6793]  ? blk_add_trace_rq_remap+0x4d0/0x4d0
[  855.927754][ T6793]  blkdev_ioctl+0x12c/0x1c40
[  855.932355][ T6793]  ? blkpg_ioctl+0xa90/0xa90
[  855.936939][ T6793]  ? __might_fault+0x12b/0x1e0
[  855.941715][ T6793]  ? __fget+0x340/0x540
[  855.945910][ T6793]  ? find_held_lock+0x35/0x130
[  855.950693][ T6793]  ? __fget+0x340/0x540
[  855.954880][ T6793]  block_ioctl+0xee/0x130
[  855.959209][ T6793]  ? blkdev_fallocate+0x410/0x410
[  855.964237][ T6793]  do_vfs_ioctl+0xd6e/0x1390
[  855.968814][ T6793]  ? ioctl_preallocate+0x210/0x210
[  855.973894][ T6793]  ? __fget+0x367/0x540
[  855.978020][ T6793]  ? ksys_dup3+0x3e0/0x3e0
[  855.982442][ T6793]  ? nsecs_to_jiffies+0x30/0x30
[  855.987269][ T6793]  ? security_file_ioctl+0x93/0xc0
[  855.992378][ T6793]  ksys_ioctl+0xab/0xd0
[  855.996528][ T6793]  __x64_sys_ioctl+0x73/0xb0
[  856.001103][ T6793]  do_syscall_64+0x103/0x610
[  856.005683][ T6793]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  856.011543][ T6793] RIP: 0033:0x458089
[  856.015405][ T6793] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  856.034977][ T6793] RSP: 002b:00007f8db8fd1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  856.043355][ T6793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089
[  856.051306][ T6793] RDX: 00000000200002c0 RSI: 00000000c0481273 RDI: 0000000000000012
[  856.059251][ T6793] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
[  856.067191][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8db8fd26d4
[  856.075131][ T6793] R13: 00000000004bf54d R14: 00000000004d0e38 R15: 00000000ffffffff
[  856.083088][ T6793] Modules linked in:
[  856.096415][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  856.102173][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  856.106222][ T6793] ---[ end trace e136b6d67e991116 ]---
[  856.113361][ T6793] RIP: 0010:relay_open_buf.part.0+0x7cb/0xb40
[  856.126220][ T6793] Code: c1 ea 03 80 3c 02 00 0f 85 4c 03 00 00 49 8d 7d 58 4d 89 ac 24 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  856.156202][ T6793] RSP: 0018:ffff888051f978b0 EFLAGS: 00010203
[  856.162280][ T6793] RAX: dffffc0000000000 RBX: ffff8880992e9a00 RCX: ffffc9000ae33000
[  856.171825][ T6759] kobject: 'kvm' (00000000cb0ae397): kobject_uevent_env
[  856.178791][ T6793] RDX: 0000000000000008 RSI: ffffffff8170edb0 RDI: 0000000000000047
[  856.186836][ T6759] kobject: 'kvm' (00000000cb0ae397): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  856.188127][ T6793] RBP: ffff888051f97928 R08: ffff888054f7a340 R09: ffff888054f7ac08
[  856.206675][ T6793] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c08a040
[  856.215044][ T6793] R13: ffffffffffffffef R14: 0000000000000000 R15: 0000000000000000
[  856.224608][ T6793] FS:  00007f8db8fd2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  856.234176][ T6793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  856.241373][ T6793] CR2: 00000000023fea38 CR3: 00000000988ac000 CR4: 00000000001406f0
[  856.249779][ T6793] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000
[  856.259339][ T6793] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  856.269729][ T6793] Kernel panic - not syncing: Fatal exception
[  856.276753][ T6793] Kernel Offset: disabled
[  856.281072][ T6793] Rebooting in 86400 seconds..