last executing test programs:

25.633636306s ago: executing program 2 (id=1399):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x6, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x60}, 0x1, 0x7}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private0, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000380)={'ah\x00'}, &(0x7f0000000480)=0x1e)

25.544112562s ago: executing program 2 (id=1401):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x10040)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "f9d0875c"}]}]}]}]}, 0x40}}, 0x8000)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
close(r6)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r4, 0x0, 0x1100000000f336, 0x0)
listen(0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x0, 0xffffffffeffffffe, 0x0, 0x0, 0x401, 0xfffffffffffffffe, 0x8, 0xffffffffffffffff}, &(0x7f0000000000)={0x18, 0x20000000000}, 0x0, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

24.701888928s ago: executing program 2 (id=1405):
r0 = socket$inet6(0xa, 0x3, 0x1ff)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0x8, 0xfffffffffffffc8c)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0xfffa, 0x1}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000007060101000000000000000002000002050001008ceb0000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', 0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r10)
sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$inet(r7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r12 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r12, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

24.52155984s ago: executing program 2 (id=1410):
r0 = socket$inet(0x2, 0x2, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)

24.413418934s ago: executing program 2 (id=1412):
unshare(0x26020400) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000150008000400010000000000000000000000000000b6c7fa"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x115, 0x70bd2b, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
socket$inet(0x2, 0x7, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040), 0x4) (async)
sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x178}, 0x24000000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0xf4e54000) (async)
sendmsg$nl_generic(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x398, 0x30, 0x800, 0x70bd29, 0x25dfdbfd, {0x16}, [@nested={0xf2, 0x13a, 0x0, 0x1, [@generic="3312f6a68ed93419bcc06dea32a88d2bdae4617d3f0b9fb31e633d5e1ea9e63b7f3118c55ecde41be3b8ba1b6ff19131fe10869df46cb8ecdb7bb869c1b97b1d1d50a4606188cf4a4ff985b9edbc775ea4331c3be4b3667dfd6065417d4fb9156fcf26f6536a7c1e43934bf43ac0618380ad0413012cc3cad78e86da6cfcd625934ee9b54b6a16a8d6bdc8796ac9ea420bb3e64212a212dca7509d7b975f5b7837fb4a24cbd49f279cc9a7bf6b83aa5ffeb5363bee7b9d287ae696821f1374eb9d51119e3636ea835cbad9cce792bdfdb69ae2528ce0", @typed={0xc, 0x22, 0x0, 0x0, @u64=0xfffffffffffffffc}, @nested={0x4, 0x96}, @typed={0x5, 0x33, 0x0, 0x0, @str='\x00'}]}, @generic="de43706a10d2bdf54d7fab5783f5ef31b478bd375373915b5f72f4a9e01b8ef0fbedaee7719a74583bd9a366198a909ac02435e90ac75500f129a7a94cd19cf3902c8ee4311e5b31b077f91b01df81b031fe43c87627c6df2ccce3f03e5367ecfb76c63badc9035e479311012c2a30752628183f43fb2076220ad5e4acf9215e36bfca510dcad1d164229db6bffd23ab979c4b69086c51de4341ebebcc463516b9c090c2143589d40996b3294505f05b462aedada9179959d6be3f7e418f5627", @nested={0xf8, 0xcb, 0x0, 0x1, [@generic="28496af737ed8478684c6745506488bd119101fb47840273893f8aa08ff49f982ad8ec2493dc8888cebe763919796871c90bf634a82cdf878c1c3afa7593fde7dd0246d01bb344bd7e2309b9cb45404ab07df23a44bc24cf0187145ab8d1b793c0d6fe993465f5dabe4b84d99706839655b45735b99016fb9b0a3404c5fe506c69ce364b75cebee73e3e162b87ab0c12a76d5be54aba0435605a6e6c57a7c851bc92738baf942a780ce8ac448312421af288fe59420cd1fa5e6b12085309e66a49ee8d17239a4609768c8a4d823fed5b205eac7be1eb44eec15a0e56a2e51e08072ae87c37bdf12856b2d88d1f0683503b595ad7"]}, @generic="59ba593eed83559182eb76ec137234c2132741d2981daa74b4809f0dab4df1d31552885b186f00233313d7eed5a0ef219ee519c6efeabdf6ac8b4c30a52f473a422199172e9facb886935d23137509ac2f", @typed={0x4, 0xd2}, @generic="df239c3d5ee1425129820968570ed5d2bf2008cd58295a1bffd1e5f4a11f30ec58e331fcf158f06b1b7aff41d58d422c97255d2aad79bbe0df91a5338c95d6de2f0101d921d3a2820d77c7bcb9e0610087e3e0ac8e603a9605c4ed652486e7e92ccdab8d49228e2b17984f5f5c3caffc55b8063d7ebaa508cc6465a73d02479d40"]}, 0x398}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

24.309369479s ago: executing program 2 (id=1414):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x200000000000011, 0x2, 0xd)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r7 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r7, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80)

17.956793945s ago: executing program 0 (id=1495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)

17.873091753s ago: executing program 0 (id=1496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)

17.813743544s ago: executing program 0 (id=1497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x26, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x0, 0x1, 0x3, 0x1}}, {0x0}, 0x0}, 0xa0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d6765a9aa7ddd0439c02a691be849b6a26e000024000280080003400000000008000140000000020800024000000000080004400000000c0900010073797a30000000000900020073797a3200000000140000001100"], 0x8c}}, 0x4)

17.811851661s ago: executing program 0 (id=1498):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) (async)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)={0x28, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xa}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) (async)
close(r8)

17.7224789s ago: executing program 0 (id=1500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4008011)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50010400200000000000000a0000000900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000004030800084000000001140000001100010000000000000000000100000a0000000000ecd4ce0df0b849318ccf430ebeb7692a69465751b6ca354f3897e53e7512cb0eae022464bb35c9969c3280be26f58ea88074a18a65f12db766664270e9ab7fb523e981d012a07a881ea22f085e10e3972802bc9e3d2662af5658250d35a5ccf553b59dd025b98bd04fb09edfdb2d97a6"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x41)

17.493732254s ago: executing program 0 (id=1501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00010000000000ffdbdf2581808000009700000000000014000200"], 0x30}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="99390ec392a33bdac1a11cdf4653657353219ea3b7bb2f801252457c73aaf05329eac04a8bbfa735e051d97226045f3c9ce32c2e87c141e83ecfb905bc42bd831c15a7c9810b2a4a47f58cc27586f70a65d73913ffba109ca371f1ae79dee39f8a54e56105d845f2ee01fd7fca4ee8f009681ff61f130e155dc209be6936c56cf2e562bc0e773a4e34279664a86055203d3e8a3891becc876c32c5f53f569c408e09a6c44fec98efc4526e5389708c65934418c4602b6aecabc381f9"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r5 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a31000500000008001240000000000500050002000000050004000100000011000300686173683a69702c706f727400"/96], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

17.380645104s ago: executing program 32 (id=1501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00010000000000ffdbdf2581808000009700000000000014000200"], 0x30}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="99390ec392a33bdac1a11cdf4653657353219ea3b7bb2f801252457c73aaf05329eac04a8bbfa735e051d97226045f3c9ce32c2e87c141e83ecfb905bc42bd831c15a7c9810b2a4a47f58cc27586f70a65d73913ffba109ca371f1ae79dee39f8a54e56105d845f2ee01fd7fca4ee8f009681ff61f130e155dc209be6936c56cf2e562bc0e773a4e34279664a86055203d3e8a3891becc876c32c5f53f569c408e09a6c44fec98efc4526e5389708c65934418c4602b6aecabc381f9"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r5 = accept4$unix(r2, 0x0, 0x0, 0x800)
recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a31000500000008001240000000000500050002000000050004000100000011000300686173683a69702c706f727400"/96], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

9.085112876s ago: executing program 33 (id=1414):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x200000000000011, 0x2, 0xd)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r7 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r7, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80)

1.151918219s ago: executing program 4 (id=1657):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040)

1.090156528s ago: executing program 4 (id=1659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = epoll_create(0x7) (async, rerun: 64)
r4 = epoll_create1(0x0) (async, rerun: 64)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x20000014})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async, rerun: 32)
shutdown(r7, 0x1) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000080))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9)
sendmsg$NFC_CMD_VENDOR(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000800000008000100", @ANYRES32=0x0, @ANYBLOB="88880e910111e3eafec1f8aa160f7b2ae6b6ba431d1d70edd16927cdf24dcc89fad93561982544d25854567323d96dea8c3642c25bdb8ffe8ca1da0642dfd3925932c0f362eff1336530578cb77deb000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r11=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100000000180000000000000000", @ANYRES32=r11, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r11, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendto$llc(r1, &(0x7f0000000240)="b585042be5141e786b52d988f86e4531516974bd1f9d53bb27dc1872e14a5022fcfcb9510d97f6baa3cd26d3c92721c356a26c6315f4064278f071eddf84009274716fc684804981147594603bcea100c0278c4fcbb51d2b57aaeddcdb42dada80534ee517999968953fe20fefd3c213c195", 0x72, 0x8000, &(0x7f00000002c0)={0x1a, 0xf, 0x8, 0xc, 0x7, 0x6, @remote}, 0x10)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r12, @ANYRES8=r13, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107e00fc0e00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x4d, 0x0, 0x0, 0x10, '\x00', r12, 0x24}, 0x94) (async)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b10000000506010800000000000000000007abdcc6d57f76b883281414b30a0000010100020073797a320000000005000100070000000900030073797a30000000000900030073797a30000000000900020073797a3000000000050001000700000005000100070000000000020073797a31000000000500"], 0x78}}, 0x8000) (async)
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000480)={@private2, @private0, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x7, 0x2, 0x400, 0x100000001, 0x2000000, r11}) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000090000000000000000000a00000a14000000090a010100000000000000000a000004140000001100010000000000000000000300370a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (rerun: 64)

1.00166054s ago: executing program 4 (id=1660):
unshare(0x20000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040880)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x0)
getpid()
close(r3)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)

652.121739ms ago: executing program 3 (id=1665):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

522.898192ms ago: executing program 3 (id=1667):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000aa240002800c00028005000100000000001400018008000100ac1e00df070002"], 0xc0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000140003051f008000fbdbdf25021ff24d", @ANYRES32=r6, @ANYBLOB="080002007f000001"], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x4040086)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r9, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xfffffffc, 0x10}, &(0x7f0000000040)=0xc)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r11 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r11, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

448.326695ms ago: executing program 4 (id=1668):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000085000000a000000095"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0690000000000000000762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000024900010073797a3000000000140000001100010000000000000000000700000a6043a676e680b820ab43e03bba1e737763431b6a"], 0x108}}, 0x0)

443.64082ms ago: executing program 3 (id=1669):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff45, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x45}, 0x810)

362.053342ms ago: executing program 3 (id=1670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/233, 0xe9}, &(0x7f0000000180)=0x40)

358.044762ms ago: executing program 4 (id=1672):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d0000000000950003"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001240000000080500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a6970246d656300"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket(0x10, 0x2, 0x0) (async, rerun: 64)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async, rerun: 64)
listen(r0, 0x1ad72f7) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001000030500004088ee25db4bce7c12", @ANYRES32, @ANYBLOB="1000020000000000600012800b00010065727370616e00005000028006000f00e6f2000008000700ff"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async)
r5 = accept4(r0, 0x0, 0x0, 0x80000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65754f12bc7c30e}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x7, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'ip6_vti0\x00', {'ip6gre0\x00'}, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
connect$inet6(r9, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="108bdf81", @ANYRES16=r10, @ANYBLOB="01002cbd70020500000005000000060001000500000008000b000400000008000c00ac0a00000800090002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
r12 = accept4$netrom(r0, 0x0, 0x0, 0x80000) (rerun: 32)
writev(r12, &(0x7f00000001c0), 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

355.749643ms ago: executing program 3 (id=1673):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b4080000000000006106650000000000060000000000000095000000000000009252a04f06397c0f947cfe287d5e09e509e1ae9cea2c2761e53b462d475eee75"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip6gre0\x00', 0x8000})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000340)={@empty, @private=0xa010102, 0x15, 0x4}})
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d1", 0x1d}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) (async)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d1", 0x1d}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_TTL={0x5, 0x2, 0xc0}, @NFTA_OSF_TTL={0x3, 0x2, 0x81}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14}}, 0x114}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_TTL={0x5, 0x2, 0xc0}, @NFTA_OSF_TTL={0x3, 0x2, 0x81}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14}}, 0x114}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580))
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x24, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@pad1]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

232.241355ms ago: executing program 1 (id=1674):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x41)
unshare(0x2040400)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0x1, @mcast1, 0x400}}}, 0x3a)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000100000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000000e080002400000000208000340000000050900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

181.28856ms ago: executing program 1 (id=1675):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073793a32000000"], 0x2c}}, 0x8004)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={<r4=>0x0, 0x8}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xffffff2f, 0x400, 0x0, 0x3ff, 0x1, 0x9, 0x1}, &(0x7f0000000140)=0x9c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x800)

180.910718ms ago: executing program 3 (id=1676):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x56, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@canfd={0xd, {{0x0, 0x0, 0x1}, 0x9, 0x0, 0x0, 0x0, "a1205e75952908f5be20c9451eca0c09bedbd572b3e1865ae3d1e1512d3b6a37ef60a0e052f66a2085f6dd4b6184d51ef4d77116f924f5b39ad3dafe670453c2"}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='kfree\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvmmsg(r0, &(0x7f0000003d40), 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000380)="79500b114a345817dfc6612fcc6068c31e76ebd921ca43e109af579a799253caa685f638ef2e8e63700300371fc538f5a7298654612021fee8556941e61c3552c6676a19a3d97b4bb07dcf2ad18ad1a25651183e49b4a25743afe5d0624135d3613e79972294bd5789c2abba0a92806a906c160c860a2d715b23b129eecb62584e8de0ae964a024e29ffceee97b20a54d35333941a79b9dc5a9589ed47fb1358251c4b500a5fbf3f522f232c6a3b794b0e814ac61c071222af64644cdd5961aaa5d0fb2cb46e1fafa6", 0x0, 0x7ff, 0x0, 0x0, 0xffffffffffffffd9, 0x0, 0x0, 0x7, 0x0, 0x10001}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r2, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c80)={0xa, 0x4e24, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003d00)="32607b20f4ebd4e86c60bfc02d671512b75c7eff8a8e4adbfc89e0e2dab4ea78829a0db8f7fa5abc8a8615c740e99c900b1b696720772d2908992aec54f5b2efdf1cc44fa94c700abe36399c6949e00ce52f6a557eaba68ff6873958a7df59bd6fe08b14cf5f0cceda5ce60c24b4912af4a4170606f75cf78be7c82f18b7d85ac2d7255d26e0dfa436467027ed7e4aa24e9c08", 0x93}, {&(0x7f0000003e00)="4359ae00e2cae11972e25bc7e1576041f2b680087a96f0f55c58a1d94fc16ea42d49990044b5dc5c2330ad8a3a7be11b9cd9c2d20c5da109c6cec75d3abd2bbdafc2148d8c7b7bdb7e5d3c87797b50bd0c46a00624b48c62773068f78744af35c93a64869cffc318c9c583d0d460fa7f7587632e8481057ad354ba74b507e6c45074f42c78b65880ca1a781bbcbfbc7eb09895c288491146af3d6f1c469e9054b9d64636f45d78568cac31bfb668638949b542", 0xb3}], 0x2}}, {{&(0x7f0000003f40)={0xa, 0x4e22, 0x5, @private1, 0x8}, 0x1c, 0x0}}], 0x3, 0x4001c00)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40805)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x0, 0x30, 0x0, 0x8}, 0x28)

180.491663ms ago: executing program 4 (id=1677):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000000}, 0x8}, 0x94)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x40, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000080)={0x9, 'veth1_to_bond\x00', {0x7ff}, 0x1000})
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)

179.81375ms ago: executing program 1 (id=1678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0)

82.001158ms ago: executing program 1 (id=1679):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12101, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3, 0x0, 0xc}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0xff, 0x4}}, 0x18)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x800) (async)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r7=>r0, 0xfffffffffffffffc, 0x6, 0x3000000000000})
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x1000600, 0x4)

80.454ms ago: executing program 1 (id=1680):
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000810}, 0x40040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000100)="ae2c3deb", 0x4}], 0x1}}], 0x1, 0x4000000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x7, @empty, 0x5}, @in6={0xa, 0x4e20, 0x2, @empty, 0x7}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x7, @loopback, 0xfa}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @remote}], 0x94)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000180)={@multicast, @multicast, @void, {@can={0xc, {{0x1}, 0x2, 0x3, 0x0, 0x0, "0ebdc2812592403b"}}}}, &(0x7f0000000700)={0x1, 0x1, [0xb6f, 0xc2d, 0xe7f, 0xff0]})
sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xc, r5}, 0x38)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000d0)
r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0xa}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x31}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x4008000)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000200), 0x4)

0s ago: executing program 1 (id=1681):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af8fe800000000000000000000001000010ff02000000000000000000000000000189"], 0x340a)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57938' (ED25519) to the list of known hosts.
syzkaller login: [   58.073089][ T5824] cgroup: Unknown subsys name 'net'
[   58.195235][ T5824] cgroup: Unknown subsys name 'cpuset'
[   58.203845][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.207434][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.189155][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.196144][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.199451][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.220823][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.224386][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.230707][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.237628][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.251315][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.257881][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.264900][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.269829][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.269930][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.278626][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.289012][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.301025][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.607430][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   65.677802][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   65.770304][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.802669][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.805870][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.808821][ T5842] bridge_slave_0: entered allmulticast mode
[   65.813086][ T5842] bridge_slave_0: entered promiscuous mode
[   65.838673][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.841645][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.844480][ T5842] bridge_slave_1: entered allmulticast mode
[   65.847893][ T5842] bridge_slave_1: entered promiscuous mode
[   65.921948][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.925151][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.928124][ T5846] bridge_slave_0: entered allmulticast mode
[   65.933244][ T5846] bridge_slave_0: entered promiscuous mode
[   65.938675][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.942329][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.945281][ T5846] bridge_slave_1: entered allmulticast mode
[   65.949371][ T5846] bridge_slave_1: entered promiscuous mode
[   65.972042][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.979364][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.044726][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.062847][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.066168][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.069621][ T5851] bridge_slave_0: entered allmulticast mode
[   66.075310][ T5851] bridge_slave_0: entered promiscuous mode
[   66.082616][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.088055][ T5842] team0: Port device team_slave_0 added
[   66.092806][ T5842] team0: Port device team_slave_1 added
[   66.104920][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.107649][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.111756][ T5851] bridge_slave_1: entered allmulticast mode
[   66.115878][ T5851] bridge_slave_1: entered promiscuous mode
[   66.194317][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.201827][ T5846] team0: Port device team_slave_0 added
[   66.205299][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.208039][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.217404][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.225878][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.239956][ T5846] team0: Port device team_slave_1 added
[   66.242723][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.245186][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.254095][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.291837][ T5851] team0: Port device team_slave_0 added
[   66.295033][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.297512][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.309096][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.316035][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.318402][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.326757][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.336586][ T5851] team0: Port device team_slave_1 added
[   66.370380][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.372729][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.381415][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.386158][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.388689][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.397784][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.427263][ T5842] hsr_slave_0: entered promiscuous mode
[   66.430417][ T5842] hsr_slave_1: entered promiscuous mode
[   66.465664][ T5846] hsr_slave_0: entered promiscuous mode
[   66.468198][ T5846] hsr_slave_1: entered promiscuous mode
[   66.471211][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   66.473134][ T5846] Cannot create hsr debugfs directory
[   66.511774][ T5851] hsr_slave_0: entered promiscuous mode
[   66.514129][ T5851] hsr_slave_1: entered promiscuous mode
[   66.516751][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   66.518581][ T5851] Cannot create hsr debugfs directory
[   66.759015][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.769484][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.775340][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.787133][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.828263][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.837517][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.856617][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.865638][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.926475][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.941229][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.951960][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.961539][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.044391][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.076528][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.085847][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   67.100379][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.103755][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.123078][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   67.127806][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.130941][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.149586][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.152250][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.177022][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.180404][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.229006][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.265649][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.277236][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.279761][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.290534][ T5852] Bluetooth: hci0: command tx timeout
[   67.297144][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.299507][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.328934][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.333106][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.359914][ T5852] Bluetooth: hci2: command tx timeout
[   67.361965][ T5852] Bluetooth: hci1: command tx timeout
[   67.424754][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.484039][ T5846] veth0_vlan: entered promiscuous mode
[   67.489214][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.497502][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.506782][ T5846] veth1_vlan: entered promiscuous mode
[   67.556101][ T5842] veth0_vlan: entered promiscuous mode
[   67.566756][ T5851] veth0_vlan: entered promiscuous mode
[   67.576314][ T5842] veth1_vlan: entered promiscuous mode
[   67.586461][ T5846] veth0_macvtap: entered promiscuous mode
[   67.594322][ T5851] veth1_vlan: entered promiscuous mode
[   67.600507][ T5846] veth1_macvtap: entered promiscuous mode
[   67.621833][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.638358][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.645720][ T5842] veth0_macvtap: entered promiscuous mode
[   67.655110][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.659307][ T5851] veth0_macvtap: entered promiscuous mode
[   67.664827][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.673235][ T5842] veth1_macvtap: entered promiscuous mode
[   67.677093][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.693599][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.697857][ T5851] veth1_macvtap: entered promiscuous mode
[   67.720947][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.737185][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.748013][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.766793][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.773407][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.791877][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.800884][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.807631][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.816896][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.820215][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.843302][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.860675][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.868565][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.888994][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.889967][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.894656][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.937134][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.943088][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.979528][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.983052][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.008182][  T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.014161][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.014412][  T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.030792][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.033583][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.170287][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.259161][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4'.
[   68.289427][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.303945][ T5924] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.410731][ T5927] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   68.707555][ T5949] tipc: Started in network mode
[   68.711819][ T5949] tipc: Node identity 8a086ea819b, cluster identity 4711
[   68.714556][ T5949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.716886][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.765241][ T5951] tipc: Disabling bearer <eth:syzkaller0>
[   68.859385][ T5955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13'.
[   68.863967][ T5955] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13'.
[   68.867093][ T5955] netlink: 'syz.0.13': attribute type 6 has an invalid length.
[   68.874330][ T5955] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13'.
[   68.892089][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'.
[   69.048510][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.056997][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.081308][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.110928][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.449556][ T5850] Bluetooth: hci1: command tx timeout
[   69.451188][ T5852] Bluetooth: hci2: command tx timeout
[   69.509607][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'.
[   69.574052][ T5992] netlink: 'syz.2.25': attribute type 3 has an invalid length.
[   69.650985][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.729120][ T6003] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   69.745046][ T6005] ieee802154 phy0 wpan0: encryption failed: -22
[   69.749509][ T6000] pimreg3: entered allmulticast mode
[   70.081038][ T6027] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received
[   70.883722][ T6044] Zero length message leads to an empty skb
[   71.204032][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.526472][ T5850] Bluetooth: hci2: command tx timeout
[   71.530602][ T5850] Bluetooth: hci1: command tx timeout
[   71.948431][ T6106] netlink: 'syz.1.54': attribute type 8 has an invalid length.
[   71.952730][ T6106] netlink: 'syz.1.54': attribute type 8 has an invalid length.
[   72.009532][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.218201][ T6116] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   72.720305][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.261154][ T6184] __nla_validate_parse: 21 callbacks suppressed
[   73.261172][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   73.267579][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   73.303698][ T6185] lo: entered allmulticast mode
[   73.306681][ T6185] tunl0: entered allmulticast mode
[   73.309596][ T6185] gre0: entered allmulticast mode
[   73.315354][ T6185] gretap0: entered allmulticast mode
[   73.318233][ T6185] erspan0: entered allmulticast mode
[   73.321858][ T6185] ip_vti0: entered allmulticast mode
[   73.325106][ T6185] ip6_vti0: entered allmulticast mode
[   73.328212][ T6185] sit0: entered allmulticast mode
[   73.331541][ T6185] ip6tnl0: entered allmulticast mode
[   73.333783][ T6185] ip6gre0: entered allmulticast mode
[   73.336781][ T6185] syz_tun: entered allmulticast mode
[   73.352482][ T6185] ip6gretap0: entered allmulticast mode
[   73.362084][ T6185] bridge0: entered allmulticast mode
[   73.366092][ T6185] vcan0: entered allmulticast mode
[   73.369608][ T6185] bond0: entered allmulticast mode
[   73.373305][ T6185] bond_slave_0: entered allmulticast mode
[   73.376597][ T6185] bond_slave_1: entered allmulticast mode
[   73.383579][ T6185] team0: entered allmulticast mode
[   73.393004][ T6185] team_slave_0: entered allmulticast mode
[   73.402963][ T6185] team_slave_1: entered allmulticast mode
[   73.413637][ T6185] dummy0: entered allmulticast mode
[   73.424882][ T6189] netlink: 'syz.1.81': attribute type 4 has an invalid length.
[   73.427463][ T6185] nlmon0: entered allmulticast mode
[   73.429088][ T6189] netlink: 17 bytes leftover after parsing attributes in process `syz.1.81'.
[   73.463162][ T6185] caif0: entered allmulticast mode
[   73.467802][ T6185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.611840][ T5850] Bluetooth: hci1: command tx timeout
[   73.612561][ T5852] Bluetooth: hci2: command tx timeout
[   73.902291][ T6211] vlan2: entered allmulticast mode
[   73.955711][ T6215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'.
[   73.958718][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'.
[   73.968397][ T6217] Driver unsupported XDP return value 0 on prog  (id 75) dev N/A, expect packet loss!
[   73.977544][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'.
[   73.985176][ T6213] Unsupported xt match
[   73.985192][ T6213] unable to load match
[   74.129574][ T6231] xt_policy: too many policy elements
[   74.252354][ T6240] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[   74.255196][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[   74.297780][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'.
[   74.347539][ T6244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.412736][ T6248] netlink: 312 bytes leftover after parsing attributes in process `syz.2.98'.
[   74.846436][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   74.866542][ T6269] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   75.681471][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[   75.691805][ T6313] bridge_slave_0: left allmulticast mode
[   75.694275][ T6313] bridge_slave_0: left promiscuous mode
[   75.697704][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.708720][ T6313] bridge_slave_1: left allmulticast mode
[   75.717479][ T6313] bridge_slave_1: left promiscuous mode
[   75.721378][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.727289][ T6313] bond0: (slave bond_slave_0): Releasing backup interface
[   75.735370][ T6313] bond0: (slave bond_slave_1): Releasing backup interface
[   75.751830][ T6313] team0: Port device team_slave_0 removed
[   75.763191][ T6313] team0: Port device team_slave_1 removed
[   75.766593][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.770829][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.774708][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.777810][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.783096][ T6313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.827916][ T6313] syz.0.118 (6313) used greatest stack depth: 19960 bytes left
[   76.048318][ T6347] warning: `syz.2.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.167523][ T6361] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[   76.274525][ T6371] Bluetooth: MGMT ver 1.23
[   76.401803][ T6380] delete_channel: no stack
[   76.916826][ T6410] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   77.576970][ T6447] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   77.708874][ T6459] netlink: 'syz.1.164': attribute type 5 has an invalid length.
[   78.048344][ T6478] pimreg: tun_chr_ioctl cmd 2147767506
[   78.073705][ T6478] pimreg: tun_chr_ioctl cmd 1074025673
[   78.076798][ T6480] pimreg: tun_chr_ioctl cmd 2147767506
[   78.626917][ T6507] syzkaller0: entered promiscuous mode
[   78.629261][ T6507] syzkaller0: entered allmulticast mode
[   78.654728][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[   78.777709][ T6509] __nla_validate_parse: 31 callbacks suppressed
[   78.777721][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   78.790800][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'.
[   78.868977][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'.
[   78.918543][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.179'.
[   78.924102][ T6515] tc_dump_action: action bad kind
[   79.066006][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   79.170746][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   79.422753][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   79.556140][ T6533] netlink: 500 bytes leftover after parsing attributes in process `syz.0.184'.
[   80.165239][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.270037][ T6576] netlink: 88 bytes leftover after parsing attributes in process `syz.0.194'.
[   80.935844][ T6501] Set syz1 is full, maxelem 65536 reached
[   81.095287][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   81.326884][ T6613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.363520][ T6618] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   81.399920][ T6613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.481137][ T6623] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[   81.495595][ T6613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.577208][ T6613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.646468][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.662609][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.677370][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.696175][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.131598][ T6657] netlink: 'syz.1.216': attribute type 1 has an invalid length.
[   82.586458][ T6693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.081136][   T33] audit: type=1107 audit(1758733719.932:2): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   83.620067][ T6738] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[   83.937328][ T6749] xt_time: invalid argument - start or stop time greater than 23:59:59
[   83.973884][ T6752] __nla_validate_parse: 9 callbacks suppressed
[   83.973896][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.242'.
[   84.061772][ T6759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.705191][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[   84.721564][ T6792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.902379][ T6804] gretap0: entered promiscuous mode
[   84.906859][ T6804] gretap0: left promiscuous mode
[   84.958758][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'.
[   85.128579][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'.
[   85.136886][ T6811] netlink: 163952 bytes leftover after parsing attributes in process `syz.0.258'.
[   85.276735][ T6817] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.261'.
[   85.281295][ T6817] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   85.364908][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[   85.455708][ T6829] netlink: 23 bytes leftover after parsing attributes in process `syz.0.266'.
[   85.483340][ T6829] netlink: 596 bytes leftover after parsing attributes in process `syz.0.266'.
[   85.557716][ T6835] tipc: Started in network mode
[   85.561294][ T6835] tipc: Node identity 4, cluster identity 4711
[   85.563532][ T6835] tipc: Node number set to 4
[   85.648069][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.270'.
[   85.699394][ T6846] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   85.781839][ T6851] netlink: 'syz.2.274': attribute type 10 has an invalid length.
[   85.784213][ T6853] netlink: 'syz.2.274': attribute type 10 has an invalid length.
[   85.788666][ T6851] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   85.796340][ T6851] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.025074][ T6871] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   86.148015][ T6880] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   86.148458][ T6879] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   86.150926][ T6880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.173705][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.498253][ T6902] veth0: entered promiscuous mode
[   86.564035][   T24] cfg80211: failed to load regulatory.db
[   87.065852][ T6926] can: request_module (can-proto-3) failed.
[   87.236252][ T6940] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 13308
[   87.306244][ T6942] veth0: entered promiscuous mode
[   87.589216][ T6977] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 3, id = 0
[   87.596791][ T6976] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[   87.606577][ T6976] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[   87.712154][ T6990] netlink: 'syz.0.312': attribute type 4 has an invalid length.
[   87.717610][ T6992] netlink: 'syz.0.312': attribute type 4 has an invalid length.
[   87.832573][ T7001] wireguard: wg0: Could not create IPv4 socket
[   87.891681][ T7005] netlink: 'syz.0.315': attribute type 3 has an invalid length.
[   88.558845][ T7025] netlink: 'syz.1.322': attribute type 11 has an invalid length.
[   89.064455][ T7045] __nla_validate_parse: 23 callbacks suppressed
[   89.064468][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.328'.
[   89.077543][ T7043] netlink: 504 bytes leftover after parsing attributes in process `syz.0.326'.
[   89.410876][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'.
[   89.512081][ T7056] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[   89.516139][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[   90.915123][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'.
[   91.010029][ T7074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'.
[   91.013556][ T7077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'.
[   91.026101][ T7073] netlink: 34 bytes leftover after parsing attributes in process `syz.0.336'.
[   91.117448][ T7022] Set syz1 is full, maxelem 65536 reached
[   91.184618][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[   91.264752][ T7083] netlink: 'syz.2.339': attribute type 4 has an invalid length.
[   91.284345][ T7083] netlink: 152 bytes leftover after parsing attributes in process `syz.2.339'.
[   91.287967][ T7083] block nbd0: not configured, cannot reconfigure
[   91.420863][ T7087] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[   92.224777][ T7107] netlink: 'syz.0.348': attribute type 11 has an invalid length.
[   92.227878][ T7107] netlink: 'syz.0.348': attribute type 11 has an invalid length.
[   92.229018][ T7109] netlink: 'syz.1.349': attribute type 1 has an invalid length.
[   92.750036][ T7148] erspan0: entered promiscuous mode
[   92.757208][ T7148] erspan0: left promiscuous mode
[   92.782745][ T7155] batadv_slave_1: entered promiscuous mode
[   92.786583][ T7155] batman_adv: batadv0: Adding interface: macsec1
[   92.789499][ T7155] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[   92.797254][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.804985][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.811370][ T7155] batman_adv: batadv0: Interface activated: macsec1
[   93.219813][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.227732][ T7188] Bluetooth: MGMT ver 1.23
[   93.228514][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.241375][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.248919][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.254193][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.259034][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.265624][ T7190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.416141][ T7195] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.759067][ T7214] netlink: 'syz.1.382': attribute type 1 has an invalid length.
[   94.446019][ T7244] tipc: Cannot configure node identity twice
[   94.459781][ T7244] __nla_validate_parse: 23 callbacks suppressed
[   94.460739][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'.
[   94.468552][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'.
[   94.473875][ T7244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.518055][ T7244] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   94.559977][ T7262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'.
[   94.880112][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   94.904864][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'.
[   95.199008][ T7305] netlink: 'syz.0.402': attribute type 5 has an invalid length.
[   95.248294][ T5908] IPVS: starting estimator thread 0...
[   95.359573][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[   95.370505][ T7315] IPVS: using max 42 ests per chain, 100800 per kthread
[   95.397486][ T7320] : renamed from vlan0 (while UP)
[   95.445076][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[   95.603661][ T7331] netlink: 'syz.1.407': attribute type 3 has an invalid length.
[   95.800947][ T7340] netlink: 5 bytes leftover after parsing attributes in process `syz.1.410'.
[   95.827154][ T7336] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   95.831690][ T7336] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   95.866341][ T7336] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.868863][ T7336] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   95.972682][ T7351] netlink: 'syz.1.411': attribute type 10 has an invalid length.
[   96.012714][ T7351] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   96.454264][ T7382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.417'.
[   96.747468][ T7391] netlink: 'syz.2.419': attribute type 13 has an invalid length.
[   96.958809][ T7403] netlink: 172 bytes leftover after parsing attributes in process `syz.0.421'.
[   96.963914][ T7403] netlink: 172 bytes leftover after parsing attributes in process `syz.0.421'.
[   96.996646][ T7404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.462922][ T7436] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   97.709574][ T7451] netlink: 'syz.0.431': attribute type 6 has an invalid length.
[   97.753283][ T7451] trusted_key: syz.0.431 sent an empty control message without MSG_MORE.
[   97.892271][ T7467] netlink: 'syz.0.435': attribute type 13 has an invalid length.
[   98.028121][ T7479] netlink: 'syz.2.436': attribute type 1 has an invalid length.
[   98.074953][ T7479] bond2: entered promiscuous mode
[   98.077803][ T7479] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.169204][ T7479] bond2: (slave bridge1): making interface the new active one
[   98.192061][ T7479] bridge1: entered promiscuous mode
[   98.214979][ T7479] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   98.370680][ T7490] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[   98.441966][ T7492] veth0_to_bridge: entered promiscuous mode
[   98.445505][ T7492] veth0_to_bridge: left promiscuous mode
[   98.615505][ T7504] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   98.835410][ T7528] !: renamed from dummy0 (while UP)
[   99.729400][ T7570] netlink: 'syz.2.452': attribute type 4 has an invalid length.
[   99.737464][ T7570] __nla_validate_parse: 14 callbacks suppressed
[   99.737482][ T7570] netlink: 152 bytes leftover after parsing attributes in process `syz.2.452'.
[   99.745704][ T7570] block nbd0: not configured, cannot reconfigure
[   99.754251][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'.
[   99.850470][ T7574] netlink: 52 bytes leftover after parsing attributes in process `syz.2.454'.
[  100.134026][ T7591] netlink: 56 bytes leftover after parsing attributes in process `syz.2.457'.
[  100.146493][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'.
[  100.500567][ T7611] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  100.565430][ T7611] netlink: 76 bytes leftover after parsing attributes in process `syz.1.462'.
[  100.602924][ T7617] netlink: 56 bytes leftover after parsing attributes in process `syz.2.465'.
[  100.762173][ T7624] delete_channel: no stack
[  100.775097][ T7631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.469'.
[  100.793737][ T7634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.805034][ T7636] netlink: 676 bytes leftover after parsing attributes in process `syz.0.470'.
[  100.809117][ T7636] netlink: 676 bytes leftover after parsing attributes in process `syz.0.470'.
[  101.139506][ T7646] IPv6: Can't replace route, no match found
[  101.428979][ T7657] netlink: 'syz.0.476': attribute type 10 has an invalid length.
[  101.535113][ T7654] netlink: 'syz.0.476': attribute type 4 has an invalid length.
[  101.897412][ T7681] pimreg3: entered allmulticast mode
[  102.437221][ T7725] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  102.643027][ T7731] bridge_slave_0: left allmulticast mode
[  102.645309][ T7731] bridge_slave_0: left promiscuous mode
[  102.648120][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.654544][ T7731] bridge_slave_1: left allmulticast mode
[  102.656959][ T7731] bridge_slave_1: left promiscuous mode
[  102.658887][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.666711][ T7731] bond0: (slave bond_slave_0): Releasing backup interface
[  102.672639][ T7731] bond0: (slave bond_slave_1): Releasing backup interface
[  102.689216][ T7731] team0: Port device team_slave_0 removed
[  102.696757][ T7731] team0: Port device team_slave_1 removed
[  102.700911][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.704512][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.708796][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.713494][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.719403][ T7731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  102.976641][ T7743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.984090][ T7743] syzkaller0: entered promiscuous mode
[  102.986543][ T7743] syzkaller0: entered allmulticast mode
[  103.007433][ T7743] tipc: Resetting bearer <eth:syzkaller0>
[  103.015265][ T7742] tipc: Resetting bearer <eth:syzkaller0>
[  103.031096][ T7742] tipc: Disabling bearer <eth:syzkaller0>
[  103.126940][ T7750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  103.132907][ T7751] team0: Mode changed to "activebackup"
[  103.696431][ T7779] 8021q: VLANs not supported on nlmon0
[  104.202656][ T7831] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[  104.208053][ T7829] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[  104.213140][ T7824] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[  104.268670][ T7836] netlink: 'syz.0.534': attribute type 6 has an invalid length.
[  104.272990][ T7836] netlink: 'syz.0.534': attribute type 5 has an invalid length.
[  104.788365][ T7870] syzkaller1: entered promiscuous mode
[  104.791954][ T7870] syzkaller1: entered allmulticast mode
[  105.016299][ T7884] Set syz1 is full, maxelem 65536 reached
[  105.078613][ T7890] __nla_validate_parse: 34 callbacks suppressed
[  105.078630][ T7890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.553'.
[  105.084895][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.552'.
[  105.086486][ T7890] block nbd0: not configured, cannot reconfigure
[  105.128049][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'.
[  105.291409][ T7909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.559'.
[  105.295029][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'.
[  105.316534][ T7911] netlink: 'syz.1.560': attribute type 1 has an invalid length.
[  105.319591][ T7911] netlink: 224 bytes leftover after parsing attributes in process `syz.1.560'.
[  105.329556][ T7911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.560'.
[  105.336137][ T7912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.560'.
[  105.389455][ T7916] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.430495][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  105.458943][ T7916] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.503252][ T7933] netlink: 'syz.0.566': attribute type 2 has an invalid length.
[  105.506363][ T7933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.566'.
[  105.526657][ T7916] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.539084][ T7933] nbd: must specify a device to reconfigure
[  105.594480][ T7916] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.694361][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.710119][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.727403][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.731865][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.747904][ T7954] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  105.754684][ T7954] syzkaller1: entered promiscuous mode
[  105.756919][ T7954] syzkaller1: entered allmulticast mode
[  105.759479][ T7955] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  106.155851][ T7988] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  106.584635][ T8025] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[  106.594147][ T8025] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[  106.603832][ T8025] netlink: 'syz.2.596': attribute type 2 has an invalid length.
[  106.638874][ T8027] netlink: 'syz.1.595': attribute type 27 has an invalid length.
[  107.334756][ T8027] batman_adv: batadv0: Interface deactivated: macsec1
[  107.349765][ T5909] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.353526][ T5909] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.411588][ T5909] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.421488][ T5909] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.455594][ T8027] syz.1.595 (8027) used greatest stack depth: 19864 bytes left
[  107.643383][ T8050] tc_dump_action: action bad kind
[  107.800010][ T8063] netlink: 'syz.0.606': attribute type 3 has an invalid length.
[  108.538790][ T8097] sch_fq: defrate 0 ignored.
[  109.953469][ T8182] netlink: 'syz.1.640': attribute type 83 has an invalid length.
[  110.139203][ T8187] __nla_validate_parse: 37 callbacks suppressed
[  110.139221][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'.
[  110.487159][ T8207] xt_policy: neither incoming nor outgoing policy selected
[  110.502912][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  110.506844][ T8209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.652'.
[  110.578391][ T8214] IPVS: ip_vs_add_dest(): server weight less than zero
[  110.584570][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.654'.
[  110.778443][ T8236] bridge2: entered promiscuous mode
[  110.790652][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'.
[  110.938111][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'.
[  111.003424][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'.
[  111.142394][ T8260] pimreg3: entered allmulticast mode
[  111.146306][ T8262] netlink: 252 bytes leftover after parsing attributes in process `syz.2.671'.
[  111.155690][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'.
[  111.162169][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.671'.
[  111.320946][ T8264] netlink: 'syz.0.672': attribute type 32 has an invalid length.
[  111.330730][ T8264] (unnamed net_device) (uninitialized): option coupled_control: invalid value (84)
[  111.608673][ T8292] netlink: 'syz.0.680': attribute type 7 has an invalid length.
[  112.396748][ T8338] erspan0: entered promiscuous mode
[  112.401751][ T8338] erspan0: left promiscuous mode
[  112.991048][ T8359] bridge0: entered allmulticast mode
[  113.010025][ T8359] bridge0 (unregistering): left allmulticast mode
[  113.486438][ T8388] batadv_slave_1: entered promiscuous mode
[  113.509123][ T8389] batadv_slave_1: left promiscuous mode
[  113.548614][ T8396] nftables ruleset with unbound set
[  113.595050][ T8394] block nbd0: not configured, cannot reconfigure
[  114.064825][ T8415] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  114.071586][ T8415] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  114.743310][ T8473] netlink: 'syz.0.738': attribute type 5 has an invalid length.
[  114.747392][ T8473] netlink: 'syz.0.738': attribute type 5 has an invalid length.
[  114.780152][ T8468] netlink: 'syz.1.736': attribute type 21 has an invalid length.
[  114.783722][ T8468] netlink: 'syz.1.736': attribute type 4 has an invalid length.
[  114.787011][ T8468] netlink: 'syz.1.736': attribute type 3 has an invalid length.
[  115.032197][ T8501] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  115.034843][   T10] IPVS: starting estimator thread 0...
[  115.131188][ T8504] IPVS: using max 57 ests per chain, 136800 per kthread
[  116.007532][ T8534] __nla_validate_parse: 36 callbacks suppressed
[  116.007558][ T8534] netlink: 104 bytes leftover after parsing attributes in process `syz.2.754'.
[  116.055731][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.754'.
[  116.074436][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'.
[  116.124158][ T8538] netlink: 'syz.0.753': attribute type 3 has an invalid length.
[  116.126810][ T8538] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.753'.
[  116.236807][ T8552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.243458][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[  116.363977][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[  116.410174][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'.
[  116.473591][ T8556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'.
[  116.579925][ T8579] netlink: 44 bytes leftover after parsing attributes in process `syz.2.766'.
[  116.584340][ T8579] netlink: 43 bytes leftover after parsing attributes in process `syz.2.766'.
[  116.588417][ T8579] netlink: 'syz.2.766': attribute type 5 has an invalid length.
[  116.627057][ T8581] sctp: [Deprecated]: syz.1.767 (pid 8581) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.627057][ T8581] Use struct sctp_sack_info instead
[  116.634920][ T8581] sctp: [Deprecated]: syz.1.767 (pid 8581) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.634920][ T8581] Use struct sctp_sack_info instead
[  116.821672][ T8593] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  117.119863][ T8609] vlan0: entered allmulticast mode
[  117.122193][ T8609] erspan0: entered allmulticast mode
[  117.229311][ T8618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  117.317438][ T8627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.413576][ T8627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.503564][ T8627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.611109][ T8627] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.740875][ T5873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.774061][ T5873] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.785138][ T5873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.797223][ T5873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.983984][ T8667] netlink: 'syz.0.790': attribute type 10 has an invalid length.
[  118.037516][ T8673] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  118.325825][ T8684] delete_channel: no stack
[  118.687559][ T8726] tipc: Started in network mode
[  118.691104][ T8726] tipc: Node identity 080211, cluster identity 4711
[  118.693824][ T8726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.697612][ T8727] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  118.701297][ T8727] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  118.708918][ T8727] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  119.082320][ T8745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.086016][ T8745] bond_slave_0: left allmulticast mode
[  119.094152][ T8745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.097543][ T8745] bond_slave_1: left allmulticast mode
[  119.103025][ T8745] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  119.106717][ T8745] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  119.109974][ T8745] bond0 (unregistering): Released all slaves
[  119.304030][ T8765] netlink: 'syz.0.822': attribute type 4 has an invalid length.
[  119.810946][   T10] tipc: Node number set to 134353152
[  120.085038][ T8826] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.088968][ T8826] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  120.249602][ T8843] netlink: 'syz.2.846': attribute type 13 has an invalid length.
[  120.381803][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.385201][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.536618][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.553286][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.799447][ T5909] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.802925][ T5909] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.807304][ T5909] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.810896][ T5909] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.390266][ T8893] netlink: 'syz.2.862': attribute type 4 has an invalid length.
[  121.453023][ T8900] __nla_validate_parse: 36 callbacks suppressed
[  121.453036][ T8900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.865'.
[  121.745653][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  121.749459][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'.
[  121.758761][ T8935] netlink: 'syz.1.872': attribute type 12 has an invalid length.
[  121.763975][ T8935] netlink: 'syz.1.872': attribute type 14 has an invalid length.
[  121.928275][ T8943] netlink: 104 bytes leftover after parsing attributes in process `syz.1.874'.
[  121.983434][ T8946] delete_channel: no stack
[  122.041403][ T8954] netlink: 'syz.1.877': attribute type 1 has an invalid length.
[  122.045089][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'.
[  122.366501][ T8989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.887'.
[  122.412086][ T8993] netlink: 140 bytes leftover after parsing attributes in process `syz.2.889'.
[  122.884594][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'.
[  123.209529][ T9021] ieee802154 phy0 wpan0: encryption failed: -22
[  123.412606][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.900'.
[  123.443639][ T9034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.902'.
[  123.756795][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.802638][ T9068] tipc: Enabling of bearer <et:g> rejected, media not registered
[  124.957673][ T9106] netlink: 'syz.0.924': attribute type 1 has an invalid length.
[  124.964232][ T9107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.967487][ T9107] IPv6: NLM_F_CREATE should be set when creating new route
[  124.970695][ T9107] IPv6: NLM_F_CREATE should be set when creating new route
[  124.977654][ T9106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.981418][ T9106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.993473][ T9107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.449346][ T9149] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  125.453780][ T9147] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  125.660746][ T9173] netlink: 'syz.2.942': attribute type 5 has an invalid length.
[  125.676986][ T9173] netlink: 'syz.2.942': attribute type 5 has an invalid length.
[  125.857041][ T9191] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  125.896454][ T9195] vxcan2: entered promiscuous mode
[  126.136476][ T9213] xt_l2tp: unknown flags: 51
[  126.364240][ T9225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  126.378451][ T9225] xfrm1: entered promiscuous mode
[  126.380942][ T9225] xfrm1: entered allmulticast mode
[  126.634157][ T9228] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  127.005505][ T9241] netlink: 'syz.1.961': attribute type 3 has an invalid length.
[  127.008981][ T9241] __nla_validate_parse: 13 callbacks suppressed
[  127.008994][ T9241] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.961'.
[  127.168699][ T9243] netlink: 76 bytes leftover after parsing attributes in process `syz.2.962'.
[  127.179147][ T9245] netlink: 'syz.0.963': attribute type 5 has an invalid length.
[  127.190087][ T9245] netlink: 'syz.0.963': attribute type 5 has an invalid length.
[  127.292510][ T9252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'.
[  127.322662][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'.
[  127.397277][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'.
[  127.454363][ T9268] bond2: left promiscuous mode
[  127.456130][ T9268] bridge1: left promiscuous mode
[  127.458821][ T9268] bridge2: left promiscuous mode
[  127.464048][ T9268] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  127.514049][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  127.517067][ T9271] netlink: 26 bytes leftover after parsing attributes in process `syz.0.972'.
[  127.746005][ T9286] erspan0: entered promiscuous mode
[  127.750559][ T9286] erspan0: left promiscuous mode
[  127.872114][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'.
[  127.953766][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.978'.
[  127.961037][ T9290] xt_time: invalid argument - start or stop time greater than 23:59:59
[  128.026415][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'.
[  128.388772][ T9305] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  128.707918][ T9337] netlink: 'syz.0.994': attribute type 10 has an invalid length.
[  128.739381][ T9339] netlink: 'syz.1.995': attribute type 3 has an invalid length.
[  128.744959][ T9339] netlink: 'syz.1.995': attribute type 2 has an invalid length.
[  128.747482][ T9339] netlink: 'syz.1.995': attribute type 2 has an invalid length.
[  128.751854][ T9340] netlink: 'syz.1.995': attribute type 3 has an invalid length.
[  128.754605][ T9340] netlink: 'syz.1.995': attribute type 2 has an invalid length.
[  128.760542][ T9340] netlink: 'syz.1.995': attribute type 2 has an invalid length.
[  128.971270][ T9370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.975340][ T9370] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  128.979154][ T9370] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  129.003414][ T9370] syzkaller0: mtu greater than device maximum
[  129.730993][ T9398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.196198][ T9480] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  131.206004][ T9481] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  131.233283][ T9485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.502700][ T9499] netlink: 'syz.1.1040': attribute type 11 has an invalid length.
[  131.747609][ T9510] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  131.767397][ T9514] lo: left allmulticast mode
[  131.769202][ T9514] tunl0: left allmulticast mode
[  131.771547][ T9514] gre0: left allmulticast mode
[  131.773121][ T9514] gretap0: left allmulticast mode
[  131.774818][ T9514] erspan0: left allmulticast mode
[  131.777352][ T9514] ip_vti0: left allmulticast mode
[  131.779946][ T9514] ip6_vti0: left allmulticast mode
[  131.782555][ T9514] sit0: left allmulticast mode
[  131.784609][ T9514] ip6tnl0: left allmulticast mode
[  131.786518][ T9514] syz_tun: left allmulticast mode
[  131.788941][ T9514] ip6gretap0: left allmulticast mode
[  131.792119][ T9514] bridge0: left allmulticast mode
[  131.794566][ T9514] vcan0: left allmulticast mode
[  131.796747][ T9514] team0: left allmulticast mode
[  131.798927][ T9514] team_slave_0: left allmulticast mode
[  131.801579][ T9514] team_slave_1: left allmulticast mode
[  131.804153][ T9514] nlmon0: left allmulticast mode
[  131.806621][ T9514] caif0: left allmulticast mode
[  131.814918][ T9514] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  131.818946][ T9514] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  132.033298][ T9531] __nla_validate_parse: 45 callbacks suppressed
[  132.033312][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1049'.
[  132.628340][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'.
[  132.642992][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.840641][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'.
[  132.844693][ T9566] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1059'.
[  132.848908][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'.
[  133.092037][ T9579] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  133.094982][ T9579] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  133.298419][ T9587] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  133.401168][ T9596] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1070'.
[  133.447441][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1071'.
[  133.566555][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'.
[  133.577579][ T9606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1072'.
[  133.597766][ T9606] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1072'.
[  133.651924][ T9610] ip6gre1: entered allmulticast mode
[  134.016901][ T9644] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  134.354851][ T9682] validate_nla: 10 callbacks suppressed
[  134.354893][ T9682] netlink: 'syz.2.1096': attribute type 7 has an invalid length.
[  134.390182][ T9682] netlink: 'syz.2.1096': attribute type 8 has an invalid length.
[  134.393388][ T9682] netlink: 'syz.2.1096': attribute type 13 has an invalid length.
[  135.347190][ T9708] netlink: 'syz.0.1102': attribute type 4 has an invalid length.
[  135.355392][ T9708] netlink: 'syz.0.1102': attribute type 2 has an invalid length.
[  136.058973][ T9775] tipc: Cannot configure node identity twice
[  136.174021][ T9780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.617239][ T9800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  136.980824][ T9840] netlink: 'syz.1.1140': attribute type 5 has an invalid length.
[  137.181368][ T9839] netlink: 'syz.0.1139': attribute type 4 has an invalid length.
[  137.305729][ T9853] netlink: 'syz.1.1143': attribute type 3 has an invalid length.
[  137.308732][ T9855] __nla_validate_parse: 27 callbacks suppressed
[  137.308752][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'.
[  137.438036][ T9858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.708254][ T9864] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1147'.
[  137.817303][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1149'.
[  137.827796][ T9869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1149'.
[  137.933736][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'.
[  137.937124][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1150'.
[  137.942637][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'.
[  137.948248][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'.
[  138.014501][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1153'.
[  138.018071][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1153'.
[  138.256322][ T9891] tipc: Invalid UDP bearer configuration
[  138.256353][ T9891] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  138.305412][ T9893] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.309411][ T9893] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  138.315492][ T9893] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  139.232612][ T9959] xt_socket: unknown flags 0xd0
[  140.191134][T10020] netlink: 'syz.1.1193': attribute type 3 has an invalid length.
[  140.374849][T10034] xfrm1: entered promiscuous mode
[  140.376659][T10034] xfrm1: entered allmulticast mode
[  140.495342][T10040] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[  140.744832][T10064] netlink: 'syz.0.1207': attribute type 4 has an invalid length.
[  140.855564][T10081] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.871632][T10081] tipc: Resetting bearer <eth:syzkaller0>
[  141.331908][T10119] netlink: 'syz.2.1223': attribute type 3 has an invalid length.
[  141.334724][T10119] netlink: 'syz.2.1223': attribute type 3 has an invalid length.
[  141.464858][T10136] netlink: 'syz.2.1228': attribute type 6 has an invalid length.
[  142.307400][T10210] netlink: 'syz.1.1255': attribute type 7 has an invalid length.
[  142.348262][T10215] __nla_validate_parse: 31 callbacks suppressed
[  142.348277][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'.
[  142.425104][T10221] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  142.451212][T10224] netlink: 'syz.0.1258': attribute type 1 has an invalid length.
[  142.491323][T10225] delete_channel: no stack
[  142.584669][T10237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1262'.
[  142.602833][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'.
[  142.621540][T10232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1261'.
[  142.630930][T10239] netlink: 'syz.1.1264': attribute type 13 has an invalid length.
[  142.677492][T10236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1261'.
[  142.802774][T10245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1265'.
[  143.085714][T10274] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1276'.
[  143.205986][T10286] netlink: 'syz.2.1280': attribute type 1 has an invalid length.
[  143.242246][T10286] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.319284][T10286] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.327489][T10286] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  143.342271][T10286] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  143.388055][T10298] veth1: entered promiscuous mode
[  143.397125][T10297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1284'.
[  143.405311][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'.
[  143.407650][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.411786][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.473508][T10291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.639569][T10314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1289'.
[  143.681696][ T5903] wlan1: Trigger new scan to find an IBSS to join
[  145.362701][T10390] validate_nla: 2 callbacks suppressed
[  145.362711][T10390] netlink: 'syz.0.1308': attribute type 16 has an invalid length.
[  145.386171][T10387] bond1: entered promiscuous mode
[  145.388527][T10387] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.565832][T10387] bond1 (unregistering): Released all slaves
[  145.703674][T10407] tipc: Can't bind to reserved service type 1
[  145.706393][T10407] netlink: 'syz.2.1313': attribute type 39 has an invalid length.
[  145.732103][T10404] openvswitch: netlink: Missing key (keys=40, expected=80)
[  145.759798][T10410] netlink: 'syz.2.1313': attribute type 5 has an invalid length.
[  145.774307][T10410] vlan3: entered allmulticast mode
[  146.906071][T10516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.183826][T10541] netlink: 'syz.2.1336': attribute type 1 has an invalid length.
[  147.187240][T10542] netlink: 'syz.2.1336': attribute type 1 has an invalid length.
[  147.220506][T10541] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.471955][T10554] __nla_validate_parse: 17 callbacks suppressed
[  147.471970][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  147.478286][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'.
[  147.540451][T10562] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1342'.
[  147.544659][T10562] netlink: 'syz.0.1342': attribute type 1 has an invalid length.
[  147.547791][T10562] netlink: 'syz.0.1342': attribute type 2 has an invalid length.
[  147.551736][T10562] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004
[  147.589376][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'.
[  147.644741][T10568] netlink: 'syz.1.1344': attribute type 54 has an invalid length.
[  147.723773][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'.
[  148.068855][T10598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1352'.
[  148.074456][T10598] netlink: 'syz.1.1352': attribute type 17 has an invalid length.
[  148.174464][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1354'.
[  148.192707][T10606] syzkaller1: entered promiscuous mode
[  148.194449][T10606] syzkaller1: entered allmulticast mode
[  148.422087][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'.
[  148.425361][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.433993][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.545818][T10627] netlink: 'syz.0.1359': attribute type 10 has an invalid length.
[  148.597025][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'.
[  148.639917][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  148.772676][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'.
[  148.822821][T10666] IPv6: Can't replace route, no match found
[  149.075050][T10685] xt_socket: unknown flags 0xd0
[  149.306797][ T5909] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.309406][ T5909] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.317164][ T5909] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.320469][ T5909] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.630315][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.941486][T10740] batadv_slave_1: entered promiscuous mode
[  149.992405][T10743] batadv_slave_1: left promiscuous mode
[  150.077561][T10748] delete_channel: no stack
[  151.339587][T10792] validate_nla: 6 callbacks suppressed
[  151.339599][T10792] netlink: 'syz.0.1411': attribute type 10 has an invalid length.
[  151.348723][T10792] bond0: (slave 0!): Enslaving as an active interface with an up link
[  151.526510][T10815] netlink: 'syz.2.1414': attribute type 13 has an invalid length.
[  151.685144][T10834] netlink: 'syz.1.1422': attribute type 2 has an invalid length.
[  152.589213][T10852] __nla_validate_parse: 19 callbacks suppressed
[  152.589230][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'.
[  152.785805][T10862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.043974][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  154.051604][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  154.184432][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  155.167510][T10917] erspan0: entered promiscuous mode
[  155.172592][T10917] erspan0: left promiscuous mode
[  155.527743][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'.
[  155.884321][T10956] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1458'.
[  156.411917][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1462'.
[  156.634463][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.649364][T10989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1468'.
[  156.689144][T10996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1470'.
[  156.766934][T11004] netlink: 'syz.1.1471': attribute type 3 has an invalid length.
[  156.870783][T11005] delete_channel: no stack
[  157.611644][T11054] __nla_validate_parse: 3 callbacks suppressed
[  157.611656][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'.
[  157.817911][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'.
[  157.917055][T11084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1497'.
[  157.920105][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1497'.
[  157.958125][T11087] erspan0: entered promiscuous mode
[  157.962724][T11087] erspan0: left promiscuous mode
[  159.333186][T11103] netlink: 'syz.1.1503': attribute type 4 has an invalid length.
[  159.492181][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  159.495514][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  159.498666][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  159.506155][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  159.510561][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  159.587862][T11108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  159.703696][T11109] chnl_net:caif_netlink_parms(): no params data found
[  159.766411][T11109] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.768777][T11109] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.771487][T11109] bridge_slave_0: entered allmulticast mode
[  159.774487][T11109] bridge_slave_0: entered promiscuous mode
[  159.778033][T11109] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.780707][T11109] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.783177][T11109] bridge_slave_1: entered allmulticast mode
[  159.786104][T11109] bridge_slave_1: entered promiscuous mode
[  159.811801][T11109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.817131][T11109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.840667][T11109] team0: Port device team_slave_0 added
[  159.844965][T11109] team0: Port device team_slave_1 added
[  159.866734][T11109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.868927][T11109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.878308][T11109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.883136][T11109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.885569][T11109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.893678][T11109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.925890][T11109] hsr_slave_0: entered promiscuous mode
[  159.928449][T11109] hsr_slave_1: entered promiscuous mode
[  159.930829][T11109] debugfs: 'hsr0' already exists in 'hsr'
[  159.933065][T11109] Cannot create hsr debugfs directory
[  160.061849][T11109] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  160.070988][T11109] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  160.077620][T11109] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  160.085636][T11109] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  160.117437][T11109] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.120350][T11109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.123352][T11109] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.126196][T11109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.167694][T11109] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.183414][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.187096][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.202561][T11109] 8021q: adding VLAN 0 to HW filter on device team0
[  160.215535][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.218392][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.228052][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.231018][ T6642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.451358][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1507'.
[  160.456867][T11137] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1507'.
[  160.463029][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1507'.
[  160.467994][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'.
[  160.473156][T11109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.528331][T11109] veth0_vlan: entered promiscuous mode
[  160.530781][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1508'.
[  160.534045][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1508'.
[  160.546554][T11109] veth1_vlan: entered promiscuous mode
[  160.571180][T11109] veth0_macvtap: entered promiscuous mode
[  160.576008][T11109] veth1_macvtap: entered promiscuous mode
[  160.594787][T11109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.603605][T11109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.610727][ T5909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.613589][ T5909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.616355][ T5909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.620640][ T5909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.680967][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.689198][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.716267][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.718805][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.130426][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.134447][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.519964][ T5852] Bluetooth: hci1: command tx timeout
[  162.352845][T11195] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  162.741775][T11208] __nla_validate_parse: 5 callbacks suppressed
[  162.741788][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'.
[  162.747114][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'.
[  162.793287][T11209] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1526'.
[  163.074995][T11187] Set syz1 is full, maxelem 65536 reached
[  163.257680][T11224] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1531'.
[  163.330410][T11230] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1534'.
[  163.334773][T11230] !: renamed from dummy0 (while UP)
[  163.552318][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'.
[  163.555876][T11243] netlink: 'syz.1.1536': attribute type 15 has an invalid length.
[  163.564951][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  163.565058][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'.
[  163.568272][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  163.572134][T11243] netlink: 'syz.1.1536': attribute type 15 has an invalid length.
[  163.589760][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  163.599747][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  163.609901][ T5852] Bluetooth: hci1: command 0x041b tx timeout
[  163.910254][T11250] bridge_slave_0: left allmulticast mode
[  163.912075][T11250] bridge_slave_0: left promiscuous mode
[  163.913910][T11250] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.918131][T11250] bridge_slave_1: left allmulticast mode
[  163.921249][T11250] bridge_slave_1: left promiscuous mode
[  163.923480][T11250] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.928618][T11250] bond0: (slave bond_slave_0): Releasing backup interface
[  163.936370][T11250] bond0: (slave bond_slave_1): Releasing backup interface
[  163.945031][T11250] team0: Port device team_slave_0 removed
[  163.951857][T11250] team0: Port device team_slave_1 removed
[  163.954760][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.957502][T11250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.965426][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.968082][T11250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.973146][T11250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  163.996449][T11250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1538'.
[  164.506641][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'.
[  164.509529][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'.
[  165.691210][ T5852] Bluetooth: hci1: command 0x041b tx timeout
[  165.950233][T11295] netlink: 'syz.3.1549': attribute type 15 has an invalid length.
[  166.193451][T11295] netlink: 'syz.3.1549': attribute type 15 has an invalid length.
[  166.193615][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  166.199276][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.203528][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  166.206891][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.213300][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  166.218302][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.222678][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  166.226297][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.852321][T11309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  166.910933][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  166.923334][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  166.925177][T11324] netlink: 'syz.3.1558': attribute type 3 has an invalid length.
[  166.929399][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  166.937556][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  166.942288][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.113149][T11321] chnl_net:caif_netlink_parms(): no params data found
[  167.209370][T11321] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.213118][T11321] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.216259][T11321] bridge_slave_0: entered allmulticast mode
[  167.222176][T11321] bridge_slave_0: entered promiscuous mode
[  167.252171][T11321] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.254877][T11321] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.257634][T11321] bridge_slave_1: entered allmulticast mode
[  167.261039][T11321] bridge_slave_1: entered promiscuous mode
[  167.292241][T11321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.297851][T11321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.344204][T11321] team0: Port device team_slave_0 added
[  167.350671][T11321] team0: Port device team_slave_1 added
[  167.387819][T11321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.390753][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.400816][T11321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.406825][T11321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.409510][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.420142][T11321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.465955][T11321] hsr_slave_0: entered promiscuous mode
[  167.466772][T11348] "syz.3.1565" (11348) uses obsolete ecb(arc4) skcipher
[  167.469054][T11321] hsr_slave_1: entered promiscuous mode
[  167.473526][T11321] debugfs: 'hsr0' already exists in 'hsr'
[  167.475745][T11321] Cannot create hsr debugfs directory
[  167.643138][T11321] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  167.648505][T11321] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  167.654100][T11321] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  167.660063][T11321] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  167.687321][T11321] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.689782][T11321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.692321][T11321] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.694653][T11321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.739243][T11321] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.751919][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.755113][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.766419][T11321] 8021q: adding VLAN 0 to HW filter on device team0
[  167.769920][ T5850] Bluetooth: hci1: command 0x041b tx timeout
[  167.776420][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.779222][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.786950][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.789386][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.854628][T11359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  167.933368][T11367] __nla_validate_parse: 14 callbacks suppressed
[  167.933379][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'.
[  168.025919][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'.
[  168.028348][T11321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.034120][T11372] netlink: 'syz.1.1568': attribute type 2 has an invalid length.
[  168.276073][T11321] veth0_vlan: entered promiscuous mode
[  168.294157][T11321] veth1_vlan: entered promiscuous mode
[  168.302252][T11400] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1574'.
[  168.316375][T11400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1574'.
[  168.336414][T11321] veth0_macvtap: entered promiscuous mode
[  168.344525][T11321] veth1_macvtap: entered promiscuous mode
[  168.364875][T11321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.388680][T11321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.391089][T11406] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1577'.
[  168.407838][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.414344][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.422896][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.425719][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.437572][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  168.489443][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.497312][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.524206][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.527424][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.583978][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'.
[  168.586211][T11413] netlink: 'syz.1.1580': attribute type 1 has an invalid length.
[  168.593988][T11413] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1580'.
[  168.699042][T11419] netlink: 'syz.4.1582': attribute type 10 has an invalid length.
[  168.705770][T11419] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  168.784572][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'.
[  168.787619][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'.
[  168.927112][T11438] netlink: 'syz.4.1588': attribute type 1 has an invalid length.
[  168.962090][ T5850] Bluetooth: hci3: command tx timeout
[  169.510568][T11476] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.513932][T11476] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.565950][T11479] netlink: 'syz.4.1596': attribute type 15 has an invalid length.
[  169.603430][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.611775][T11476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.716055][T11479] netlink: 'syz.4.1596': attribute type 15 has an invalid length.
[  169.716562][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  169.723047][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.726693][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  169.732228][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.737493][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  169.742697][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.746384][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  169.749932][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.841302][ T5850] Bluetooth: hci1: command 0x041b tx timeout
[  169.984266][T11495] netlink: 'syz.1.1605': attribute type 1 has an invalid length.
[  169.986940][T11495] netlink: 'syz.1.1605': attribute type 4 has an invalid length.
[  170.363729][T11514] xt_time: invalid argument - start or stop time greater than 23:59:59
[  170.545139][T11516] netlink: 'syz.3.1611': attribute type 8 has an invalid length.
[  170.551604][T11516] bond0: entered promiscuous mode
[  170.562779][T11516] bond0: left promiscuous mode
[  170.684360][T11518] tipc: Started in network mode
[  170.685994][T11518] tipc: Node identity ac14140f, cluster identity 4711
[  170.688870][T11518] tipc: New replicast peer: 255.255.255.255
[  170.706069][T11518] tipc: Enabled bearer <udp:syz2>, priority 10
[  170.857636][T11525] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  170.913652][T11525] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  170.987629][T11525] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  171.041642][ T5850] Bluetooth: hci3: command tx timeout
[  171.061027][T11525] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  171.165848][ T5713] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  171.175516][ T5713] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  171.185734][ T5713] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  171.195430][ T5713] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  171.711112][ T5908] tipc: Node number set to 2886997007
[  171.813555][T11561] xt_l2tp: missing protocol rule (udp|l2tpip)
[  172.253532][T11570] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  172.384229][T11583] netlink: 'syz.3.1632': attribute type 4 has an invalid length.
[  172.402435][T11583] block nbd0: not configured, cannot reconfigure
[  172.750211][T11605] openvswitch: netlink: Flow actions attr not present in new flow.
[  173.120085][ T5850] Bluetooth: hci3: command tx timeout
[  173.153035][T11619] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  173.263991][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[  173.267333][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[  173.274120][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[  173.277837][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[  173.313826][T11625] __nla_validate_parse: 16 callbacks suppressed
[  173.313838][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'.
[  173.318671][T11625] netlink: 'syz.1.1642': attribute type 15 has an invalid length.
[  173.322716][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'.
[  173.326183][T11628] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1643'.
[  174.192983][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'.
[  174.250097][T11646] validate_nla: 1 callbacks suppressed
[  174.250114][T11646] netlink: 'syz.1.1650': attribute type 1 has an invalid length.
[  174.255544][T11646] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1650'.
[  174.269152][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'.
[  174.330793][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'.
[  174.536496][T11670] netlink: 'syz.4.1656': attribute type 11 has an invalid length.
[  174.857933][T11690] netlink: 'syz.1.1661': attribute type 1 has an invalid length.
[  174.883664][T11690] netlink: 'syz.1.1661': attribute type 1 has an invalid length.
[  174.888460][T11691] netlink: 'syz.4.1660': attribute type 1 has an invalid length.
[  174.900163][T11691] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1660'.
[  175.016754][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1664'.
[  175.034956][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.038246][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.060178][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.189884][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.199888][ T5850] Bluetooth: hci3: command tx timeout
[  175.208207][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.238947][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'.
[  175.247243][T11706] netlink: 'syz.3.1667': attribute type 3 has an invalid length.
[  175.250394][T11706] netlink: 'syz.3.1667': attribute type 2 has an invalid length.
[  175.253417][T11706] netlink: 'syz.3.1667': attribute type 2 has an invalid length.
[  175.617894][T11737] lo speed is unknown, defaulting to 1000
[  175.624768][T11737] lo speed is unknown, defaulting to 1000
[  175.628280][T11737] lo speed is unknown, defaulting to 1000
[  175.803601][   T10] lo speed is unknown, defaulting to 1000
[  175.806842][T11737] infiniband syz0: set down
[  175.808697][T11737] infiniband syz0: added lo
[  175.822087][    C1] ==================================================================
[  175.825333][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  175.828494][    C1] Write of size 8 at addr ffff8881219128b0 by task swapper/1/0
[  175.832928][    C1] 
[  175.833939][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  175.833960][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.833971][    C1] Call Trace:
[  175.833980][    C1]  <IRQ>
[  175.833988][    C1]  dump_stack_lvl+0x189/0x250
[  175.834022][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  175.834067][    C1]  ? rcu_is_watching+0x15/0xb0
[  175.834081][    C1]  ? __kasan_check_byte+0x12/0x40
[  175.834101][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.834115][    C1]  ? rcu_is_watching+0x15/0xb0
[  175.834127][    C1]  ? lock_release+0x4b/0x3e0
[  175.834147][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  175.834162][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  175.834177][    C1]  print_report+0xca/0x240
[  175.834191][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  175.834207][    C1]  kasan_report+0x118/0x150
[  175.834224][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  175.834243][    C1]  __xfrm_state_delete+0x696/0xca0
[  175.834264][    C1]  xfrm_timer_handler+0x18f/0xa00
[  175.834284][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  175.834300][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  175.834314][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.834329][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.834341][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.834355][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  175.834372][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  175.834387][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  175.834408][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  175.834418][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  175.834433][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  175.834449][    C1]  handle_softirqs+0x286/0x870
[  175.834463][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  175.834475][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  175.834488][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  175.834507][    C1]  __irq_exit_rcu+0xca/0x1f0
[  175.834520][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  175.834535][    C1]  irq_exit_rcu+0x9/0x30
[  175.834546][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  175.834560][    C1]  </IRQ>
[  175.834565][    C1]  <TASK>
[  175.834570][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.834586][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  175.834601][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  175.834612][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  175.834626][    C1] RAX: da58d2cb1c0d2c00 RBX: ffffffff819683f8 RCX: da58d2cb1c0d2c00
[  175.834637][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba1e5 RDI: ffffffff8be33f00
[  175.834646][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  175.834656][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38f30
[  175.834665][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020006000
[  175.834675][    C1]  ? do_idle+0x1e8/0x510
[  175.834699][    C1]  default_idle+0x13/0x20
[  175.834713][    C1]  default_idle_call+0x74/0xb0
[  175.834729][    C1]  do_idle+0x1e8/0x510
[  175.834743][    C1]  ? __pfx_do_idle+0x10/0x10
[  175.834761][    C1]  cpu_startup_entry+0x44/0x60
[  175.834773][    C1]  start_secondary+0x101/0x110
[  175.834793][    C1]  common_startup_64+0x13e/0x147
[  175.834817][    C1]  </TASK>
[  175.834822][    C1] 
[  175.960141][    C1] Allocated by task 10057:
[  175.961860][    C1]  kasan_save_track+0x3e/0x80
[  175.963690][    C1]  __kasan_slab_alloc+0x6c/0x80
[  175.965587][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  175.967875][    C1]  xfrm_state_alloc+0x24/0x2f0
[  175.969763][    C1]  __find_acq_core+0x8a7/0x1c00
[  175.971720][    C1]  xfrm_find_acq+0x78/0xa0
[  175.973516][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  175.975526][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.977491][    C1]  netlink_rcv_skb+0x208/0x470
[  175.979413][    C1]  xfrm_netlink_rcv+0x79/0x90
[  175.981276][    C1]  netlink_unicast+0x82f/0x9e0
[  175.983216][    C1]  netlink_sendmsg+0x805/0xb30
[  175.985141][    C1]  __sock_sendmsg+0x21c/0x270
[  175.987005][    C1]  ____sys_sendmsg+0x505/0x830
[  175.988884][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  175.990786][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  175.992817][    C1]  do_syscall_64+0xfa/0x3b0
[  175.994631][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.996967][    C1] 
[  175.997939][    C1] Freed by task 5880:
[  175.999548][    C1]  kasan_save_track+0x3e/0x80
[  176.001363][    C1]  kasan_save_free_info+0x46/0x50
[  176.003396][    C1]  __kasan_slab_free+0x5b/0x80
[  176.005229][    C1]  kmem_cache_free+0x18f/0x400
[  176.007053][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  176.009048][    C1]  process_scheduled_works+0xae1/0x17b0
[  176.011222][    C1]  worker_thread+0x8a0/0xda0
[  176.013057][    C1]  kthread+0x711/0x8a0
[  176.014672][    C1]  ret_from_fork+0x439/0x7d0
[  176.016504][    C1]  ret_from_fork_asm+0x1a/0x30
[  176.018397][    C1] 
[  176.019348][    C1] The buggy address belongs to the object at ffff888121912880
[  176.019348][    C1]  which belongs to the cache xfrm_state of size 928
[  176.024747][    C1] The buggy address is located 48 bytes inside of
[  176.024747][    C1]  freed 928-byte region [ffff888121912880, ffff888121912c20)
[  176.029989][    C1] 
[  176.030975][    C1] The buggy address belongs to the physical page:
[  176.033480][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888121911680 pfn:0x121910
[  176.037421][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  176.040696][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  176.043695][    C1] page_type: f5(slab)
[  176.045280][    C1] raw: 057ff00000000040 ffff888104dc6b40 dead000000000122 0000000000000000
[  176.048659][    C1] raw: ffff888121911680 00000000800e000a 00000000f5000000 0000000000000000
[  176.051911][    C1] head: 057ff00000000040 ffff888104dc6b40 dead000000000122 0000000000000000
[  176.055301][    C1] head: ffff888121911680 00000000800e000a 00000000f5000000 0000000000000000
[  176.058693][    C1] head: 057ff00000000002 ffffea0004864401 00000000ffffffff 00000000ffffffff
[  176.062000][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  176.065354][    C1] page dumped because: kasan: bad access detected
[  176.067864][    C1] page_owner tracks the page as allocated
[  176.070087][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7091, tgid 7090 (syz.1.342), ts 91836123183, free_ts 91199801417
[  176.077354][    C1]  post_alloc_hook+0x240/0x2a0
[  176.079274][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  176.081435][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  176.083778][    C1]  alloc_pages_mpol+0x232/0x4a0
[  176.085698][    C1]  allocate_slab+0x8a/0x370
[  176.087477][    C1]  ___slab_alloc+0xbeb/0x1420
[  176.089321][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  176.091483][    C1]  xfrm_state_alloc+0x24/0x2f0
[  176.093361][    C1]  xfrm_add_sa+0x17d1/0x4070
[  176.095181][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  176.097120][    C1]  netlink_rcv_skb+0x208/0x470
[  176.098947][    C1]  xfrm_netlink_rcv+0x79/0x90
[  176.100824][    C1]  netlink_unicast+0x82f/0x9e0
[  176.102703][    C1]  netlink_sendmsg+0x805/0xb30
[  176.104595][    C1]  __sock_sendmsg+0x21c/0x270
[  176.106434][    C1]  ____sys_sendmsg+0x505/0x830
[  176.108283][    C1] page last free pid 7081 tgid 7078 stack trace:
[  176.110664][    C1]  __free_frozen_pages+0xbc4/0xd30
[  176.112663][    C1]  stack_depot_save_flags+0x436/0x860
[  176.114742][    C1]  kasan_save_track+0x4f/0x80
[  176.116609][    C1]  __kasan_kmalloc+0x93/0xb0
[  176.118450][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  176.120641][    C1]  prog_array_map_alloc+0x51/0x200
[  176.122664][    C1]  map_create+0xaa3/0x14d0
[  176.124434][    C1]  __sys_bpf+0x60f/0x870
[  176.126113][    C1]  __x64_sys_bpf+0x7c/0x90
[  176.127857][    C1]  do_syscall_64+0xfa/0x3b0
[  176.129580][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.131879][    C1] 
[  176.132840][    C1] Memory state around the buggy address:
[  176.135057][    C1]  ffff888121912780: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  176.138184][    C1]  ffff888121912800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.141320][    C1] >ffff888121912880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.144481][    C1]                                      ^
[  176.146702][    C1]  ffff888121912900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.149810][    C1]  ffff888121912980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.152581][    C1] ==================================================================
[  176.155325][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  176.157658][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  176.160480][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.164264][    C1] Call Trace:
[  176.165355][    C1]  <IRQ>
[  176.166276][    C1]  dump_stack_lvl+0x99/0x250
[  176.167789][    C1]  ? __asan_memcpy+0x40/0x70
[  176.169510][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.171352][    C1]  ? __pfx__printk+0x10/0x10
[  176.173184][    C1]  vpanic+0x281/0x750
[  176.174758][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  176.176808][    C1]  ? __pfx_vpanic+0x10/0x10
[  176.178645][    C1]  ? asm_common_interrupt+0x26/0x40
[  176.180653][    C1]  panic+0xb9/0xc0
[  176.182152][    C1]  ? __pfx_panic+0x10/0x10
[  176.184077][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  176.186418][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.188868][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  176.190952][    C1]  check_panic_on_warn+0x89/0xb0
[  176.192955][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  176.195095][    C1]  end_report+0x78/0x160
[  176.196929][    C1]  kasan_report+0x129/0x150
[  176.198784][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  176.200930][    C1]  __xfrm_state_delete+0x696/0xca0
[  176.203053][    C1]  xfrm_timer_handler+0x18f/0xa00
[  176.205082][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  176.207260][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  176.209591][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.211626][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  176.213984][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.216483][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  176.218636][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  176.220778][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  176.222772][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  176.224992][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  176.227270][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  176.229265][    C1]  handle_softirqs+0x286/0x870
[  176.230946][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  176.232417][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  176.234415][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  176.236469][    C1]  __irq_exit_rcu+0xca/0x1f0
[  176.238283][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  176.240293][    C1]  irq_exit_rcu+0x9/0x30
[  176.241985][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  176.244300][    C1]  </IRQ>
[  176.245495][    C1]  <TASK>
[  176.246670][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  176.249033][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  176.251277][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  176.258689][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  176.261119][    C1] RAX: da58d2cb1c0d2c00 RBX: ffffffff819683f8 RCX: da58d2cb1c0d2c00
[  176.264242][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba1e5 RDI: ffffffff8be33f00
[  176.267314][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  176.270448][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38f30
[  176.273484][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020006000
[  176.276658][    C1]  ? do_idle+0x1e8/0x510
[  176.278365][    C1]  default_idle+0x13/0x20
[  176.280058][    C1]  default_idle_call+0x74/0xb0
[  176.281904][    C1]  do_idle+0x1e8/0x510
[  176.283521][    C1]  ? __pfx_do_idle+0x10/0x10
[  176.285368][    C1]  cpu_startup_entry+0x44/0x60
[  176.287284][    C1]  start_secondary+0x101/0x110
[  176.289088][    C1]  common_startup_64+0x13e/0x147
[  176.291078][    C1]  </TASK>
[  176.293055][    C1] Kernel Offset: disabled
[  176.294741][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:10:12  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8be12c20 RBX=dffffc0000000000 RCX=0000000000000000 RDX=000000008be51a00
RSI=ffffffff8c7265a0 RDI=ffffffff8be12c20 RBP=0000000000000028 RSP=ffffc9000341e7a0
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000341ea80 R11=fffff52000683d55
R12=ffffffff99e70750 R13=ffffffff962a0300 R14=0000000000000000 R15=ffffffff934e5068
RIP=ffffffff8b76ec51 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe984c116c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee180f0fc8 CR3=0000000026b0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe983fa7498 00007fe983fa7470 XMM03=00007fe983fa74a8 00007fe983fa74a0
XMM04=00007fe984b0d100 00007fe983fa7460 XMM05=00007fe983fa7478 00007fe983fa74c0
XMM06=00007fe983fa74b8 00007fe983fa74b0 XMM07=00007fe983fa74a8 00007fe983fa74a0
XMM08=0000000000000000 00007fe983e12f0f XMM09=0000000000000000 00007fe983e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff8881064d8237 R9 =1ffff11020c9b046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b0290e R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003000 CR3=00000000279fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
