last executing test programs:

3.383592956s ago: executing program 0 (id=262):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001680)=ANY=[@ANYBLOB="2c0000002d00010000000600000031f2947f0c0030e8e5c9293a09b850be775a1878e64fe20d12c34e74b50809ec4ba75b47f406b894d94f38eaf222d7254023c6173934f460804d60a04299621f0e7d7faa5ba099030c908172b49895aaa6a58b005552cda863c84c14b2975e109b7bcb9b3f018a676fa854c624c0639d7bb19f9323f073608c624f07cbe6850060439654e9266a21dc1b97658870d259d96858b105", @ANYRES32=r4, @ANYBLOB="0b000080976b640868603000080001800400f680"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000001040111000000000000000001000000ea03000083bc06000000ab0c"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000005008900000008000300", @ANYRES32=r6, @ANYBLOB="04001d80"], 0x20}}, 0x0) (async)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f22898a4cc855612694eaaeb343201", 0x907614ef7d4ee881)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
r8 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000380)={0x3, 0x2}, 0x4)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async, rerun: 64)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000)="e82077c215425453529f1c5079c210dbde4b82f24cd4a12ed9b7946bf8d53ab47c58415516", &(0x7f0000000680)=""/4096, &(0x7f0000000180)="5b898d15b25092bdd6b7b641617748ba29e15654c30cc8e7156291cebb1df67160612baa7c5b63f05014c4000cdbbcb681513f4ffdb2885d7404bcdb29f82fcb88d1eebacd6804170e273da1cd82ee50a88d4e1974874d455a1f8e124dc2d9fb364113a3713c2ca54d2a4d2a4f23372b52f6cc3086947156e484e93ebd27788dd3c9de808de51f8d5b72b7c29d85b4870abf8b173ade4272b04f88a8348e8b9686", &(0x7f0000000240)="d013fecca3fbb8e6e4830bb5a727db2e35ae762487f781ac14b05c9352747f1a02559f421ea523c9db4f6458b70949cbd927e4556202075fa506c85944220ae6029277ac2a2e7c8808fea3b3083d462a1e0ad18d419b848ba7b952f6e0099b5ebbfe9a8910e3cfc1a85efdc228e8f187fb7b45e5759931bb72f3e02fe760e220cbd3e54604a0b366f4bdffbf28e246f8d9be307a4397061ba8ece268ca08e5e6c6cd2769b835e3494e6a34f7e59fe64418e8ced34a14", 0x8, r10, 0x4}, 0x38) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)

3.382077414s ago: executing program 0 (id=263):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4d821048}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x20, 0x8, "132cdb9a006d0e314c721eee298146f6b654179ff4e4d34eb1aef018"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x41, 0x8, "22bd1576b55ff9a17c9ebbb82f88f143bdd8dc09ea9fb1e8a58050a515d70149fba42880492a69d28444338ecad7c68571b3ff538fbe10475b4b486b95"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x38c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xbff9497b3113cb12, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x370, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x310, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x300, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_TO_DATA={0x68, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x284, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x27, 0x1, "615395a3ac02304e32d20707108c4f0be48d6825b78fc22e4ce0b95c0942873cc6f9bb"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "48ec93a0fc482057c549f14cac3c0b7a828abe51931548e30efe430d1aee9d67d51c73945901010d961d934e7acd7641640e71efc0ded86d63e64197375c9033b1265a74f20464460f5a07d85f93246cd17a2c99eedf1d43d40a4f8029ea3d8848a09336aa8712e498"}, @NFTA_DATA_VALUE={0xa9, 0x1, "789834c988b91279ccb3b485deaa5bed4aaf22318208841f94b8f161ece6d6442a89b8e3baddac112d5619f4bbd16ac558d5e7a6504be29dc00c7e877581c09ddecd95fe020b381c2636feea0e77b87559b1872b002d855620320d9dacb9ea3f242799cc5aaad9aa6d04dbc2f90995f61145f8e1886c73d7c4095055f5489de2627934277beb094ff4365a07b1fbaced4e56863a7e5905c57cb20471f5f4bd2316f8848a09"}, @NFTA_DATA_VALUE={0x1a, 0x1, "3f026ba9c9b3b1a1bb6dd95c8b111daaadb5cf8646c5"}, @NFTA_DATA_VALUE={0x38, 0x1, "c518acc9fe3e37cf07eced467800b501750fa205be94d8b971109f0e242f1ec691d62b89d4a59ecc31f64c66dd42f54ca131c641"}, @NFTA_DATA_VALUE={0x43, 0x1, "e5b9ab3f8f58e90229ab8f29a3f0f5ea815c8d7d63725474123912d2a03a0e59ede9c349c430804dc0f6508701205b4c38347d419029cbc765364efb250a01"}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe6d}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_DELTABLE={0x1dc, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xac, 0x6, "499e8292a1a8ca4f50088dd8264be83adeccad1f3a364f5f1d6e0e07a1896346446f85f18dff2f1ec5901d01ccf39b23bafc32ae20773f1d571f1cd680e2a946b4800bb771573d2fb0300a4ed5246ad30b5b594e054090657f1fbcf90af71a3159f8f34c4e5b3be0b75b53d14a2e306dbf80485db54d297790a8c7cfb01b258d2dc665ce6b20ae6c9fd1b4b677e662934a578e2aac0d2b19d716e39c33ca22b8feb38f58a085ee21"}, @NFTA_TABLE_USERDATA={0x36, 0x6, "b39aac99f882be8af7fc98676c1e9206860b6b2dc2771c9366d4f4b0fb2df26ee23e7c624268257ac223014eaf2049662e72"}, @NFTA_TABLE_USERDATA={0xcc, 0x6, "66056e08000c070fba7ebcdef186ce35cb9c4f4d19f6f005f10e98f58a6d9c00da9f6a19f154ac24c6417f0afe147f8e58a05e8320c32e4ab413f3290b438644967875c0034e77b29ccbaa034b93c5acd1ca0112f58917b21b3f873b75e96978706d5f1f412aab5df8553b7990cde34f4c5adebf1e5c6b301bdd03dca73a05a911481efa30d9fe061f9f71f3014fd14a82bd19e8a9039f410ccda4777c7cdfffa21a7c6c6e7d4c1bda94a4a8c4b7c2e033e08cea84e31ba1780403cdb905f62e4283a60d4024bf0c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x313a8b04}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}]}, @NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x5c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8b0}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xec}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_TYPE={0x8}]}}}]}]}, @NFT_MSG_DELFLOWTABLE={0x178, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x6840f0b6b2167836, 0x0, 0x7}, [@NFTA_SET_DESC={0x7c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c2cb57f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe008}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xaf8}, 0x1, 0x0, 0x0, 0x20004051}, 0x40040)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000040), 0x4)
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$kcm(0x2d, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={<r5=>r4})
bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x100000c, r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='afs_make_fs_call1\x00', 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
socket$kcm(0xa, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x8)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

2.441961946s ago: executing program 0 (id=269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}}, 0x41) (async)
r1 = socket(0x10, 0x803, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
recvmmsg$unix(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/217, 0xd9}], 0x1}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f00000005c0)=""/6, 0x6}, {&(0x7f0000000940)=""/190, 0xbe}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/175, 0xaf}, {&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/232, 0xe8}, {&(0x7f0000000d40)=""/228, 0xe4}], 0x8, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)=""/74, 0x4a}, {&(0x7f0000001180)=""/211, 0xd3}, {&(0x7f0000001280)=""/212, 0xd4}, {&(0x7f0000001380)=""/11, 0xb}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001440)=""/104, 0x68}], 0x7, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40006000, &(0x7f0000001580)) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000fc0)=ANY=[@ANYBLOB="00050000000000000000001f290000000003000001"], 0x30) (async)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_int(r4, &(0x7f0000000000)=0x8, 0x12) (async)
close(r4) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async)
splice(r3, 0x0, r4, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.441278262s ago: executing program 0 (id=270):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ec}}, 0x28}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r0)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022abd7000fedbdf2577001017be44f0367846a92a7b7c44ef00000c009900000000003c0000000800ef000a0000000800ef00080000000500ee00ff0000000500ee00030000000500ee00030000000800ef00000000000500ee0003000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newchain={0x34, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x34}}, 0x44004)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x3)
close(r7)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffff74b}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x700)

2.183830583s ago: executing program 1 (id=271):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
socket(0x10, 0x80002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
r4 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, 0x0, &(0x7f0000000240))

1.550212547s ago: executing program 0 (id=273):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)=""/138, 0x11b, 0x8a, 0x0, 0xffffb9ef, 0x10000}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x4, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r7, 0x1) (async)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=r6], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1)
recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) (async)
recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)

1.313192035s ago: executing program 1 (id=274):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa08004510001c0066000007029078d3b61ef4a9de4030eeb10a010102ac14"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)="d3", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xfffffc01}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x1800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="240080000104050000000000000000000000000006000640000300000500010001000000"], 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c00ff07000000000000006d274a5e2800008020009c50bf9259cee6d40e37f5c1a63c85a24263f1c9d44f05bf8c91d46dfdb8b273b06d08d872a214707554a2ffcff7dfeecb974c0113b6867eec0c44b4e227b30c3e8dc2f928c9b4a24626d4c7208ad597cb58d936e3aecdfd808ab9f160015d36dd97504daf8d646874c717a17feb65dee92975d75717701324d817062a4abfd10e9aefd8e74decfbc88400"/174], 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf251700000050000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="20000180080003000000000014000200626f6e645f736c6176655f310000000034000180140002007866726d3000000000000000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="440001801492de55c64eea30000000000000080083000300000008000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468310000000000000000000000200001800800030001000000140002007663616e3000000000000000000000000c0001800800030002000000"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x4040850)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
close(r6)
r10 = socket(0x10, 0x803, 0x0)
sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)

1.112619417s ago: executing program 1 (id=275):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98)
splice(r1, 0x0, r6, 0x0, 0x80, 0x8)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r7, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}, @authinfo={0x12, 0x84, 0x6, {0x6}}], 0x30, 0x4004080}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r5, 0x0, r8, 0x0, 0x708ab233, 0x0)
write(r3, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

782.61248ms ago: executing program 2 (id=276):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)='\'', 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

779.147221ms ago: executing program 2 (id=277):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="76ae529d48"]}, 0x1c}}, 0x20008040)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0)
syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0)
close(r0)
socket$kcm(0x11, 0x5, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000007000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x673055034300c0a3}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0}, 0x94)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r9, 0x0, 0x80000000000}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)

643.775526ms ago: executing program 2 (id=278):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@phonet={0x23, 0xc, 0xa7, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="98f82c34b0572db4a70792034648f8fd7cbb29cc1afbf501fb60d1077aa956be65c0ea78afb5e51c0e2c5f012b5e72782fdec0bbc30bdf90d67463ca37ead1132bd34710a6f9011dacd217dc546d07b434eb672abc3ee6a1b8ef8569f42e2ccf4602733679ab733dd49d24e6d36f00ebd667fb0f4e607990e0fccc3280b9321e77993b84804552dccb0592c1094fecfb54b373b9e1901070df0975e42c40e30059d5d481752f1e709feee0eb54deb5405c1ff169a3f7007c7be79807bbe928a37810570c29f7bf81", 0xc8}, {&(0x7f0000000200)="31122ff696f6f4138eb3d2d2111e29c471e794b57e167eb9d58994ade6be16fe0c92fa4644b31ff855a5e67e1b3639fc7e45c91f90fb7e3e7923a10fafd5408260f1f17f4d63e81db1c8ad8e3a0984b8faabbf21287740435fd5", 0x5a}], 0x2, &(0x7f0000000380)=[{0x58, 0xb, 0x5, "5d8d2a884438db1ca5cc0dcf4f3d9c6fd2c94fe79d4831d7a9c8b6d3c81c5e7ef1a43cb67844cc0d89ad95269b5109806f91398bd6b5cd06ab21f29513e80556279aeb959edd"}], 0x58}, 0x804)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)

643.252639ms ago: executing program 0 (id=279):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r2 = accept(r1, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2)
write(r0, &(0x7f00000002c0), 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x48}}, 0x4080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) (async)
recvmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r11, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r11, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0)
r12 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r13 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r12, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r12, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

573.461863ms ago: executing program 2 (id=280):
unshare(0x20000400)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

572.874491ms ago: executing program 2 (id=281):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
sendmmsg(0xffffffffffffffff, &(0x7f0000005800), 0x0, 0x4000000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x256, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fed0e94222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={r8}, &(0x7f0000000080)=0x8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000640)={0x0, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8000}}, {{0xa, 0x4e23, 0x6c1b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x108)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002740)={0x0, 0x0, "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", "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"})
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

501.723179ms ago: executing program 2 (id=282):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x15, 0x0, 0x56)
r2 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x81, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x138, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x86}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xbf4, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x814, 0x3, 0x0, 0x1, [{0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xb6}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7a22839df5c1d22}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "831e1e41dbd267eebf8f26e383958d5f4bd6480d981073c72ad32aa34fb2a92c9803365efaedd8951338194363df1786945e7b27696bb0413bd7455437235b600823347b1019c0ac25616fd82a08674aa3b1f674021d7ae5b7bbfd8fd6cadee2cda75256a80317b31fb0b6020ab7c6b70c28e52a351dfbc5f768ad62288418293e941bef6c2fc25664a7c52e07dfe122d73dd08462fecdfd37bde1ca8dba4eebe7d5d54768fdbfac63e4ebf56aefb1a2ae4657f33b3838b40895483341c84ac96e82f1f8e9dd9780b9ed7596c00cb70e07623e48"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "8bf92960d1ec82329b490f7003894c23bb874dae55b5b776c0cd5393a55bd8cdd40426c76622b38b9116abe7de65844104dbc45925a73b42394a141cdcebe2881d9a7d2b1b0604bbdaf58c4e756ef0968b1f26acb42c2cc1c3667158ea59c0d68490f38eb78784842a3f7a3e8c6ad142faaad38e32abdeb1d421a9d21a3954146ac03667b4c6282623e6c0"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0xd0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x53, 0x1, "55b84946b6ffbc65ea2f92c02b34f48dc0362d2d3a0f2ed8ea3040990bcf882d5d098c6c4af62125358e381c92c0d78bfe92185733046c512f25d4f67d60be3500f3ef78b648abbf723509d5a0946e"}, @NFTA_DATA_VALUE={0xa, 0x1, "f41b68269140"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "683c3830b93afa72b6416c111ff7f1dfb24ac8db9493610b0479d153bbe9f71e6572826fe0da2801fd2c9e2dcad41c6cdcd0291fef92fa3b3d90c492865a3c946410b6c25af966d7ed2a2199198df9821cf04f36a6de64d5f776273eb468508d021f8897c82d46e43f8f56107fe36a4e12f11496b5de46c9c4050edafe1ae3"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa04}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x41, 0x6, 0x1, 0x0, "26d17d2b965b963cfe04a94114f5125fa2aef87ab6253cd4ddc23a676259c0ae6810c053c7df0a5e660ffbfea1968c8e552ebeef049e22be762db255b9"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "e92c12b59efe4243eba733d7305b0f6d0e932bfd1e9a0dff74d3d537dcec29a685c7946be5c5cbb1c456cfc8f0a4cf4b9ce4b331f78345e2186eda5a3e374b4d8749f6b1fba412de2f9d5a596f"}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6a, 0x6, 0x1, 0x0, "4c5c2bc8797e276d86b2cd544c90ca305f9076032d1ce3dba74e5beac913cd24fc96f8ee5653a6b45688414c368afeb8f7965b7b4f851ea2e855bc885cc96276cd30f45fb2334a9639045de5c663dc3a411418db2b8c32bc576e84bb44b0342865aa4110aa60"}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2e9}]}, {0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x138, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5, 0x1, "91"}, @NFTA_DATA_VALUE={0xd7, 0x1, "94bd9fd7b2ba4ba9a5fabaf7e5972f6f1be23770d95e4a50104654b46bf15daa5d10ae9bada36818c4d2c222701360f9a412e80761befba2addc2c8a4d34708312ab823f7cb4bf337b4f9dafe7d603977ede648524c6c90a8fd8c78cfef87af4729e8fdc2b7176486ecce4964c86d804a0370e4c630070d74fee76759677b8dec7647e423461eecfb06777e452a7abbcafdaeed88edb2fb4dfe4fff17bb92aaca646c9aaa3f6e3d5dbda7e3e5c39494f4b2ed73e035409da340c04d73d6db947d6cd009fa449f824b2cdd7fa320adccdd8d45a"}]}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "2a58f8965160565ca335465be2599123b583b00eb0b25e445ee4f4ac2210abc798e3fffa97cf86c5127af572977a71c614d51f16d8a9470b89eaa6b812094d22e3b5c97c1a560a46113b3779b7cc1c48d7d622760fd4046a76930de80f6fa6d5a2"}, @NFTA_SET_ELEM_USERDATA={0x67, 0x6, 0x1, 0x0, "bcfc33edfb637581ff2f1496f0da209ad524130f0e5f3c682fb332669e2ac1b1ec404731fc5e7a5a52450abfa3fd1f522f9f922c4a7433f23650ebd2c434a4455157c47d0445feb7e3ae43dd7f5b149db0b073ee5250cca0db03741f26a71ecdee8e63"}, @NFTA_SET_ELEM_KEY_END={0x80, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c0, 0x3, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x370, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x32c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x320, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8f97f13ca001a609}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x2f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x30, 0x1, "43750643f98a6965a6a48ae43214b34ba9ffb5762cd4a86d7d8e7acac2f268b5d565cf20879998f7f1b0c9f2"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "b1f41de0aa18932cbd656beaa3c23f943fa475d681c2e89c7b7cd316c58d37dd1617282988611bea6ba856155b33b6085aa2f9a142db73b1ef71a92256c82f73d495418651366e7c2810ae525f74e1ff041f0f92623dfcb1ca805aaded70f33a23c7696857d7d9217d455db825de2a1a9a405d6d42d4149629370fe2eecbf4dab02020b4c586eee366360648d9b568519ee2e427244a2079e67d035655fed2846580ec84032a95537bc63a6c1cdec9380f6d0436e55da8672176ba70d138fac8869aa2f698"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "f3518b2e918e96c839b08be2f304c6ea3e513f14b3054e6de750a4f1ccbb56fe5edb00b80081f069d23a149bf67c4dbc15fa8f0b06ff38aaf01d5c40bb2492be3afdf0dcb0818ffc55ece5dfe238338dad8302832c8d898ef5a8b38af96979c81c5c5a1fe6244d2200397b205d3914afc6cbb264260f3279575b402cb77ebc40689a010726eb7630816559f5766cb0ca64ac166be4ee82d4d5faca2a5230e346956773e4ba84a9b0fc99473cde5511e031150c8ee4"}, @NFTA_DATA_VALUE={0x64, 0x1, "3a81c15d869d2391f7857d19ff47abd1653a1a8f3b2b6ace8cd889c023d4c6f3386175e7f7030e3d13b7b8fa8b09260dd621a8aea5ae356d1e45517f383b5121db128ebd1720e9c78a8aff4910c6db25ffa7343ea68a5820abb62b278ebaea7a"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x101}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xe48}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
read(r2, &(0x7f0000000300)=""/212, 0xd4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)

143.439894ms ago: executing program 1 (id=283):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000000000000000000deffffff18117f07", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd"], 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r5=>0x0, @local, @remote}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0x20, 0xb, 0x8000, 0x2, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x4, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', <r7=>0x0, 0x0, 0x0, 0x3556, 0x100, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x65, 0x0, 0xf8, 0x29, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0xce, [@remote, @broadcast, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @local, @loopback, @local]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r8=>0x0})
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x20008001)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000bc0)={0x350, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf6a4c3b62d58178}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x350}}, 0x2000080c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.255186ms ago: executing program 1 (id=284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x30, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "47c229d6a38fe13fdd553f343d85540b48f38dce7131cff8d855b05671c7ed75c5cb88d2"}}}}}}}, 0x0)

0s ago: executing program 1 (id=285):
socket$packet(0x11, 0xa, 0x300) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x26, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) (async)
accept$netrom(r3, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @null, @rose, @remote, @bcast, @rose, @netrom, @rose]}, &(0x7f0000000100)=0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14097' (ED25519) to the list of known hosts.
syzkaller login: [   48.176699][ T5777] cgroup: Unknown subsys name 'net'
[   48.298785][ T5777] cgroup: Unknown subsys name 'cpuset'
[   48.303696][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.130736][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.627620][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.630787][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.634387][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.635702][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.641553][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.644862][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.645291][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.651348][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.654240][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.656852][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.693011][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.702758][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.706860][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.710466][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.713835][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.973298][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.047186][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.078047][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.128831][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.131649][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.134415][ T5847] bridge_slave_0: entered allmulticast mode
[   55.138632][ T5847] bridge_slave_0: entered promiscuous mode
[   55.143849][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.147168][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.149910][ T5847] bridge_slave_1: entered allmulticast mode
[   55.153295][ T5847] bridge_slave_1: entered promiscuous mode
[   55.247006][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.250317][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.253251][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.256975][ T5845] bridge_slave_0: entered allmulticast mode
[   55.260823][ T5845] bridge_slave_0: entered promiscuous mode
[   55.284561][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.298934][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.301502][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.303864][ T5845] bridge_slave_1: entered allmulticast mode
[   55.307912][ T5845] bridge_slave_1: entered promiscuous mode
[   55.347490][ T5847] team0: Port device team_slave_0 added
[   55.373554][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.377079][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.380145][ T5854] bridge_slave_0: entered allmulticast mode
[   55.383974][ T5854] bridge_slave_0: entered promiscuous mode
[   55.389233][ T5847] team0: Port device team_slave_1 added
[   55.391329][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.394205][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.398256][ T5854] bridge_slave_1: entered allmulticast mode
[   55.402149][ T5854] bridge_slave_1: entered promiscuous mode
[   55.409425][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.450645][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.467799][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.472920][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.476095][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.485902][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.510296][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.514081][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.517354][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.525867][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.530655][ T5845] team0: Port device team_slave_0 added
[   55.550509][ T5845] team0: Port device team_slave_1 added
[   55.579510][ T5854] team0: Port device team_slave_0 added
[   55.591228][ T5854] team0: Port device team_slave_1 added
[   55.637699][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.640270][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.649517][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.653503][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.656190][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.664624][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.672814][ T5847] hsr_slave_0: entered promiscuous mode
[   55.676685][ T5847] hsr_slave_1: entered promiscuous mode
[   55.679625][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.681773][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.690233][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.694643][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.698213][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.709878][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.819527][ T5854] hsr_slave_0: entered promiscuous mode
[   55.822797][ T5854] hsr_slave_1: entered promiscuous mode
[   55.827253][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   55.829669][ T5854] Cannot create hsr debugfs directory
[   55.853158][ T5845] hsr_slave_0: entered promiscuous mode
[   55.856584][ T5845] hsr_slave_1: entered promiscuous mode
[   55.859235][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.861336][ T5845] Cannot create hsr debugfs directory
[   56.149722][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.177168][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.189328][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.194975][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.273837][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.281029][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.292420][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.299262][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.390900][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.402409][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.410625][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.422232][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.481675][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.518768][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.538583][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.541442][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.553508][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.556334][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.573979][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.621676][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   56.645641][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.648600][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.680645][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.685328][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.688320][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.706616][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.742699][ T5237] Bluetooth: hci2: command tx timeout
[   56.746902][   T54] Bluetooth: hci0: command tx timeout
[   56.749383][ T5851] Bluetooth: hci1: command tx timeout
[   56.762476][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.765593][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.771996][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.774939][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.821173][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.912008][ T5847] veth0_vlan: entered promiscuous mode
[   56.923470][ T5847] veth1_vlan: entered promiscuous mode
[   56.986100][ T5847] veth0_macvtap: entered promiscuous mode
[   56.993567][ T5847] veth1_macvtap: entered promiscuous mode
[   57.021213][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.037502][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.059224][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.068163][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.073290][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.085733][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.099748][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.117666][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.167387][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.169935][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.208973][ T5845] veth0_vlan: entered promiscuous mode
[   57.222914][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.223600][ T5845] veth1_vlan: entered promiscuous mode
[   57.228493][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.257315][ T5854] veth0_vlan: entered promiscuous mode
[   57.280117][ T5854] veth1_vlan: entered promiscuous mode
[   57.301947][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.304669][ T5845] veth0_macvtap: entered promiscuous mode
[   57.318477][ T5845] veth1_macvtap: entered promiscuous mode
[   57.350434][ T5854] veth0_macvtap: entered promiscuous mode
[   57.369055][ T5854] veth1_macvtap: entered promiscuous mode
[   57.378629][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.384057][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.405921][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.421448][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.435053][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.451022][ T5722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.454052][ T5722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.457914][ T5722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.466379][ T5722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.478396][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.482521][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.500463][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.504588][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.889395][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.891879][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.915613][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.918804][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.924150][ T5923] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   57.930334][ T5923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   57.948218][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.950818][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.002785][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.010152][ T5925] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.013775][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.021790][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.115039][ T5930] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.122112][ T5930] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   58.133308][ T5931] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.143316][ T5931] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   58.246016][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'.
[   58.312803][ T5940] netlink: 'syz.1.7': attribute type 4 has an invalid length.
[   58.460615][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'.
[   58.564053][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'.
[   58.587324][ T5945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.816131][   T54] Bluetooth: hci0: command tx timeout
[   58.818453][ T5851] Bluetooth: hci1: command tx timeout
[   58.820707][ T5237] Bluetooth: hci2: command tx timeout
[   59.031601][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   59.644882][ T5945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.895976][   T54] Bluetooth: hci0: command tx timeout
[   60.898203][ T5237] Bluetooth: hci2: command tx timeout
[   60.900362][ T5237] Bluetooth: hci1: command tx timeout
[   62.743530][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'.
[   62.752990][ T5945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.851952][ T5945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.977211][   T54] Bluetooth: hci0: command tx timeout
[   62.979387][   T54] Bluetooth: hci2: command tx timeout
[   62.981848][ T5237] Bluetooth: hci1: command tx timeout
[   63.032756][ T5990] netlink: 'syz.1.23': attribute type 2 has an invalid length.
[   63.036477][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.068695][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.087643][ T5990] k*]: entered promiscuous mode
[   63.139825][ T5990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.144804][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.148616][    C0] Illegal XDP return value 16128 on prog  (id 18) dev bridge0, expect packet loss!
[   63.159657][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.164600][ T5990] veth0_to_team: entered promiscuous mode
[   63.174067][ T5990] veth0_to_team: entered allmulticast mode
[   63.257632][ T6006] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.285655][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.289360][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.293078][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.296355][ T6016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.298267][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.302555][ T6014] netlink: 5 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.306165][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.311942][ T6015] netlink: 'syz.1.29': attribute type 16 has an invalid length.
[   66.314731][ T6014] netlink: 'syz.1.29': attribute type 16 has an invalid length.
[   66.320315][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.323173][ T6015] netlink: 'syz.1.29': attribute type 17 has an invalid length.
[   66.327086][ T6014] netlink: 'syz.1.29': attribute type 17 has an invalid length.
[   66.330704][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.334765][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   66.468802][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.471962][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.598560][ T6024] netlink: 'syz.0.33': attribute type 1 has an invalid length.
[   66.600984][ T6024] netlink: 'syz.0.33': attribute type 2 has an invalid length.
[   66.603637][ T6024] netlink: 'syz.0.33': attribute type 8 has an invalid length.
[   66.610888][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.622444][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.775043][ T5875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.779970][ T5875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.785914][ T5875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.788775][ T5875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.796166][ T6026] Zero length message leads to an empty skb
[   66.882397][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.908655][ T6034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.011423][ T6040] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET)
[   67.120507][ T6044] netlink: 'syz.0.39': attribute type 7 has an invalid length.
[   67.241652][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.244668][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.922234][ T6076] __nla_validate_parse: 7 callbacks suppressed
[   67.922246][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   68.198706][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.201161][ T6081] netlink: 'syz.0.51': attribute type 4 has an invalid length.
[   68.203999][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.207384][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.209938][ T6081] netlink: 'syz.0.51': attribute type 4 has an invalid length.
[   68.212433][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.215693][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.218286][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.221332][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.224141][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.228510][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.231063][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.234763][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.237714][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.240833][ T6081] netlink: 'syz.0.51': attribute type 11 has an invalid length.
[   68.243396][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.51'.
[   68.373839][ T6090] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.53'.
[   68.470067][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   68.671212][ T6115] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   68.792314][ T6123] sctp: [Deprecated]: syz.2.62 (pid 6123) Use of int in maxseg socket option.
[   68.792314][ T6123] Use struct sctp_assoc_value instead
[   69.925121][ T6172] syzkaller1: entered promiscuous mode
[   69.930580][ T6172] syzkaller1: entered allmulticast mode
[   69.937186][ T6175] netlink: zone id is out of range
[   69.938934][ T6175] netlink: zone id is out of range
[   69.940571][ T6175] netlink: zone id is out of range
[   69.942178][ T6175] netlink: zone id is out of range
[   69.943801][ T6175] netlink: zone id is out of range
[   69.945744][ T6175] netlink: zone id is out of range
[   69.947441][ T6175] netlink: zone id is out of range
[   69.949027][ T6175] netlink: zone id is out of range
[   69.953464][ T6175] netlink: zone id is out of range
[   70.562379][ T6202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.584097][ T6209] batman_adv: batadv0: Adding interface: virt_wifi0
[   70.587643][ T6209] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.598372][ T6209] batman_adv: batadv0: Interface activated: virt_wifi0
[   70.633123][ T6202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.697999][ T6202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.754757][ T6202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.839021][ T5722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.863870][ T5722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.880726][ T5722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.894380][ T5722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.063858][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.199407][ T6235] pim6reg1: entered promiscuous mode
[   71.202573][ T6235] pim6reg1: entered allmulticast mode
[   72.130355][ T6276] validate_nla: 12 callbacks suppressed
[   72.130390][ T6276] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   72.350378][ T6282] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[   72.362366][ T6282] bridge: RTM_NEWNEIGH with invalid ether address
[   72.472439][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.478341][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.952723][ T6297] __nla_validate_parse: 15 callbacks suppressed
[   72.952740][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'.
[   72.996565][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[   73.000260][ T6302] IPv6: Can't replace route, no match found
[   73.578467][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.642233][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'.
[   73.648587][ T6321] bridge_slave_1: left allmulticast mode
[   73.650595][ T6321] bridge_slave_1: left promiscuous mode
[   73.652572][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.657215][ T6319] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20000
[   73.664338][ T6321] bridge_slave_0: left allmulticast mode
[   73.667524][ T6321] bridge_slave_0: left promiscuous mode
[   73.669925][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.318969][ T6347] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   74.618579][ T6356] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[   74.760008][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   74.764510][ T6362] tipc: Started in network mode
[   74.766915][ T6362] tipc: Node identity 4, cluster identity 4711
[   74.769451][ T6362] tipc: Node number set to 4
[   74.977794][ T6369] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   74.989747][ T6369] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   75.059630][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   76.320666][ T6420] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[   76.346851][ T6420] k*]: entered promiscuous mode
[   76.360765][ T6420] veth0_to_team: entered promiscuous mode
[   76.363429][ T6420] veth0_to_team: entered allmulticast mode
[   76.690706][ T6439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.693328][ T6439] syzkaller0: entered promiscuous mode
[   76.695434][ T6439] syzkaller0: entered allmulticast mode
[   76.846128][ T6441] tipc: Resetting bearer <eth:syzkaller0>
[   76.931464][ T6443] dvmrp0: entered allmulticast mode
[   77.036660][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'.
[   77.059521][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.063144][ T6438] tipc: Resetting bearer <eth:syzkaller0>
[   77.066290][ T6447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.162'.
[   77.076650][ T6438] tipc: Disabling bearer <eth:syzkaller0>
[   77.203779][ T6454] Bluetooth: MGMT ver 1.23
[   77.272039][ T6461] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   77.274642][ T6461] netlink: 244 bytes leftover after parsing attributes in process `syz.1.166'.
[   77.395148][ T6468] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   77.402769][ T6468] netlink: 'syz.2.167': attribute type 10 has an invalid length.
[   77.430673][ T6471] netlink: 104 bytes leftover after parsing attributes in process `syz.1.169'.
[   77.573691][ T6486] netlink: 'syz.0.173': attribute type 2 has an invalid length.
[   77.591429][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.594344][ T6486] bridge0: port 2(bridge_slave_1) entered listening state
[   77.597466][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.600448][ T6486] bridge0: port 1(bridge_slave_0) entered listening state
[   77.614825][ T6486] net_ratelimit: 12 callbacks suppressed
[   77.614842][ T6486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.788107][ T6501] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   77.829027][ T6509] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   77.831436][ T6509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.021942][ T6520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.031439][   T24] IPVS: starting estimator thread 0...
[   78.115367][ T6521] IPVS: using max 64 ests per chain, 153600 per kthread
[   78.131967][ T6526] IPVS: set_ctl: invalid protocol: 47 172.20.20.11:20003
[   78.211824][ T6529] netlink: 'syz.0.189': attribute type 8 has an invalid length.
[   78.496366][ T6547] IPVS: set_ctl: invalid protocol: 58 172.30.1.2:20000
[   78.657989][ T6560] netlink: 'syz.0.201': attribute type 1 has an invalid length.
[   78.701158][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.714491][ T6560] bond1: (slave geneve2): making interface the new active one
[   78.718957][ T6560] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   78.791388][ T6571] netlink: 'syz.1.205': attribute type 30 has an invalid length.
[   78.926314][ T6579] __nla_validate_parse: 3 callbacks suppressed
[   78.926327][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[   79.051033][ T6585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.209'.
[   79.101619][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'.
[   79.148248][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   79.228677][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   79.271261][ T6605] netlink: 64 bytes leftover after parsing attributes in process `syz.0.214'.
[   79.327824][ T6603] geneve2: entered promiscuous mode
[   79.331300][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   79.334125][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   79.339618][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   79.342761][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   79.386047][ T6612] netlink: 184 bytes leftover after parsing attributes in process `syz.1.217'.
[   79.472713][ T6619] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   79.660122][ T6634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   79.701856][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   79.704750][ T6635] netlink: 'syz.1.224': attribute type 5 has an invalid length.
[   79.708026][ T6635] netlink: 48 bytes leftover after parsing attributes in process `syz.1.224'.
[   79.714377][ T6635] geneve3: entered promiscuous mode
[   79.716656][ T6635] geneve3: entered allmulticast mode
[   79.728449][ T6634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   79.736682][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   79.739538][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   80.296827][ T6650] netlink: 128 bytes leftover after parsing attributes in process `syz.0.230'.
[   80.420340][ T6657] bond0: default FDB implementation only supports local addresses
[   80.443777][ T6647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.446400][ T6660] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   80.603627][ T6669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.700070][ T6669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.750423][ T6669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.781960][ T6678] syzkaller1: entered promiscuous mode
[   80.783926][ T6678] syzkaller1: entered allmulticast mode
[   80.820414][ T6669] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.901870][ T5722] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.921838][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.937244][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.951564][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.212697][ T6634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.226546][ T6634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   81.307108][  T794] cfg80211: failed to load regulatory.db
[   81.378917][ T6634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.382992][ T6634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   81.482324][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   81.490055][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   81.510713][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   81.516978][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   81.537556][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   81.541569][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   81.552830][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   81.556111][ T5875] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   81.600163][ T6707] netlink: 'syz.1.244': attribute type 2 has an invalid length.
[   81.605740][ T6707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.866680][ T6744] __nla_validate_parse: 4 callbacks suppressed
[   84.866693][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   84.871688][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'.
[   84.877191][ T6744] netlink: 'syz.1.257': attribute type 18 has an invalid length.
[   84.976667][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'.
[   84.997570][ T6751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.338518][ T6760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.261'.
[   85.341516][ T6760] netlink: 5 bytes leftover after parsing attributes in process `syz.0.261'.
[   85.344818][ T6760] netlink: 5 bytes leftover after parsing attributes in process `syz.0.261'.
[   85.390427][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[   85.399655][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'.
[   85.774119][ T6771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.821661][ T6771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.872307][ T6771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.935081][ T6771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.008274][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.018557][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.027592][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.039369][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.607727][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'.
[   86.611140][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[   86.614628][ T6797] netlink: 'syz.1.271': attribute type 18 has an invalid length.
[   87.347573][ T6805] netlink: 'syz.0.273': attribute type 4 has an invalid length.
[   88.211734][ T6834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.258463][ T6834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.578070][ T6834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.743510][ T6834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.823109][ T5722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.844191][ T5722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.860205][ T5722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.872417][ T5722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.878831][ T6833] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.886026][ T5722] ==================================================================
[   88.888586][ T5722] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[   88.891284][ T5722] Read of size 8 at addr ffff88802384a0b0 by task kworker/u8:2/5722
[   88.895517][ T5722] 
[   88.896378][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[   88.896389][ T5722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.896395][ T5722] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   88.896412][ T5722] Call Trace:
[   88.896417][ T5722]  <TASK>
[   88.896421][ T5722]  dump_stack_lvl+0x189/0x250
[   88.896434][ T5722]  ? __kasan_check_byte+0x12/0x40
[   88.896448][ T5722]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.896457][ T5722]  ? lock_release+0x4b/0x3e0
[   88.896471][ T5722]  ? __virt_addr_valid+0x4a5/0x5c0
[   88.896482][ T5722]  print_report+0xca/0x240
[   88.896490][ T5722]  ? __mutex_lock+0x147/0x1350
[   88.896499][ T5722]  kasan_report+0x118/0x150
[   88.896509][ T5722]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   88.896517][ T5722]  ? __mutex_lock+0x147/0x1350
[   88.896527][ T5722]  __mutex_lock+0x147/0x1350
[   88.896536][ T5722]  ? __mutex_lock+0x5bb/0x1350
[   88.896545][ T5722]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[   88.896553][ T5722]  ? __pfx___mutex_lock+0x10/0x10
[   88.896562][ T5722]  ? __lock_acquire+0xab9/0xd20
[   88.896574][ T5722]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[   88.896583][ T5722]  ? process_scheduled_works+0x9ef/0x17b0
[   88.896593][ T5722]  ? process_scheduled_works+0x9ef/0x17b0
[   88.896600][ T5722]  process_scheduled_works+0xae1/0x17b0
[   88.896613][ T5722]  ? __pfx_process_scheduled_works+0x10/0x10
[   88.896623][ T5722]  worker_thread+0x8a0/0xda0
[   88.896635][ T5722]  kthread+0x711/0x8a0
[   88.896646][ T5722]  ? __pfx_worker_thread+0x10/0x10
[   88.896653][ T5722]  ? __pfx_kthread+0x10/0x10
[   88.896663][ T5722]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.896669][ T5722]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.896677][ T5722]  ? __pfx_kthread+0x10/0x10
[   88.896686][ T5722]  ret_from_fork+0x3fc/0x770
[   88.896696][ T5722]  ? __pfx_ret_from_fork+0x10/0x10
[   88.896704][ T5722]  ? __switch_to_asm+0x39/0x70
[   88.896713][ T5722]  ? __switch_to_asm+0x33/0x70
[   88.896722][ T5722]  ? __pfx_kthread+0x10/0x10
[   88.896731][ T5722]  ret_from_fork_asm+0x1a/0x30
[   88.896744][ T5722]  </TASK>
[   88.896747][ T5722] 
[   88.960863][ T5722] Allocated by task 6834:
[   88.962223][ T5722]  kasan_save_track+0x3e/0x80
[   88.963645][ T5722]  __kasan_kmalloc+0x93/0xb0
[   88.965037][ T5722]  __kmalloc_noprof+0x27a/0x4f0
[   88.966523][ T5722]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[   88.968403][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   88.969984][ T5722]  register_netdevice+0x1608/0x1ae0
[   88.971576][ T5722]  nsim_create+0xae8/0xf10
[   88.972930][ T5722]  __nsim_dev_port_add+0x6b6/0xb10
[   88.974485][ T5722]  nsim_dev_port_add_all+0x37/0xf0
[   88.976090][ T5722]  nsim_dev_reload_up+0x451/0x780
[   88.977629][ T5722]  devlink_reload+0x4ec/0x8d0
[   88.979082][ T5722]  devlink_nl_reload_doit+0xb35/0xd50
[   88.980712][ T5722]  genl_family_rcv_msg_doit+0x215/0x300
[   88.982458][ T5722]  genl_rcv_msg+0x60e/0x790
[   88.983830][ T5722]  netlink_rcv_skb+0x208/0x470
[   88.985351][ T5722]  genl_rcv+0x28/0x40
[   88.986607][ T5722]  netlink_unicast+0x82f/0x9e0
[   88.988101][ T5722]  netlink_sendmsg+0x805/0xb30
[   88.989581][ T5722]  __sock_sendmsg+0x21c/0x270
[   88.991051][ T5722]  ____sys_sendmsg+0x505/0x830
[   88.992727][ T5722]  ___sys_sendmsg+0x21f/0x2a0
[   88.994201][ T5722]  __x64_sys_sendmsg+0x19b/0x260
[   88.995871][ T5722]  do_syscall_64+0xfa/0x3b0
[   88.997674][ T5722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.999865][ T5722] 
[   89.000626][ T5722] Freed by task 6833:
[   89.001935][ T5722]  kasan_save_track+0x3e/0x80
[   89.003412][ T5722]  kasan_save_free_info+0x46/0x50
[   89.004981][ T5722]  __kasan_slab_free+0x5b/0x80
[   89.006496][ T5722]  kfree+0x18e/0x440
[   89.007731][ T5722]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[   89.009629][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.011201][ T5722]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[   89.013224][ T5722]  unregister_netdevice_queue+0x33c/0x380
[   89.014979][ T5722]  nsim_destroy+0x1dd/0x670
[   89.016392][ T5722]  __nsim_dev_port_del+0x14d/0x1b0
[   89.017978][ T5722]  nsim_dev_reload_destroy+0x288/0x490
[   89.019670][ T5722]  nsim_dev_reload_down+0x8a/0xc0
[   89.021269][ T5722]  devlink_reload+0x1b6/0x8d0
[   89.022842][ T5722]  devlink_nl_reload_doit+0xb35/0xd50
[   89.024755][ T5722]  genl_family_rcv_msg_doit+0x215/0x300
[   89.026638][ T5722]  genl_rcv_msg+0x60e/0x790
[   89.028089][ T5722]  netlink_rcv_skb+0x208/0x470
[   89.029763][ T5722]  genl_rcv+0x28/0x40
[   89.031008][ T5722]  netlink_unicast+0x82f/0x9e0
[   89.032490][ T5722]  netlink_sendmsg+0x805/0xb30
[   89.033926][ T5722]  __sock_sendmsg+0x21c/0x270
[   89.035369][ T5722]  ____sys_sendmsg+0x505/0x830
[   89.036798][ T5722]  ___sys_sendmsg+0x21f/0x2a0
[   89.038467][ T5722]  __x64_sys_sendmsg+0x19b/0x260
[   89.040075][ T5722]  do_syscall_64+0xfa/0x3b0
[   89.041592][ T5722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.043703][ T5722] 
[   89.044664][ T5722] Last potentially related work creation:
[   89.046932][ T5722]  kasan_save_stack+0x3e/0x60
[   89.048803][ T5722]  kasan_record_aux_stack+0xbd/0xd0
[   89.050946][ T5722]  insert_work+0x3d/0x330
[   89.052629][ T5722]  __queue_work+0xbaf/0xfb0
[   89.054387][ T5722]  queue_work_on+0x181/0x270
[   89.056178][ T5722]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   89.058363][ T5722]  udp_tunnel_push_rx_port+0x180/0x200
[   89.060442][ T5722]  geneve_offload_rx_ports+0xd7/0x160
[   89.062538][ T5722]  geneve_netdevice_event+0x6a/0x80
[   89.064582][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.066642][ T5722]  call_netdevice_notifiers+0x88/0xc0
[   89.068767][ T5722]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[   89.071210][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.073240][ T5722]  register_netdevice+0x1608/0x1ae0
[   89.075421][ T5722]  nsim_create+0xae8/0xf10
[   89.077190][ T5722]  __nsim_dev_port_add+0x6b6/0xb10
[   89.079230][ T5722]  nsim_dev_port_add_all+0x37/0xf0
[   89.081295][ T5722]  nsim_dev_reload_up+0x451/0x780
[   89.083341][ T5722]  devlink_reload+0x4ec/0x8d0
[   89.085226][ T5722]  devlink_nl_reload_doit+0xb35/0xd50
[   89.087396][ T5722]  genl_family_rcv_msg_doit+0x215/0x300
[   89.089598][ T5722]  genl_rcv_msg+0x60e/0x790
[   89.091524][ T5722]  netlink_rcv_skb+0x208/0x470
[   89.093465][ T5722]  genl_rcv+0x28/0x40
[   89.095101][ T5722]  netlink_unicast+0x82f/0x9e0
[   89.097047][ T5722]  netlink_sendmsg+0x805/0xb30
[   89.099011][ T5722]  __sock_sendmsg+0x21c/0x270
[   89.100930][ T5722]  ____sys_sendmsg+0x505/0x830
[   89.102884][ T5722]  ___sys_sendmsg+0x21f/0x2a0
[   89.104796][ T5722]  __x64_sys_sendmsg+0x19b/0x260
[   89.106796][ T5722]  do_syscall_64+0xfa/0x3b0
[   89.108580][ T5722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.110953][ T5722] 
[   89.111928][ T5722] Second to last potentially related work creation:
[   89.114537][ T5722]  kasan_save_stack+0x3e/0x60
[   89.116420][ T5722]  kasan_record_aux_stack+0xbd/0xd0
[   89.118507][ T5722]  insert_work+0x3d/0x330
[   89.120258][ T5722]  __queue_work+0xcd2/0xfb0
[   89.122036][ T5722]  queue_work_on+0x181/0x270
[   89.123891][ T5722]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   89.126129][ T5722]  udp_tunnel_push_rx_port+0x180/0x200
[   89.128322][ T5722]  geneve_offload_rx_ports+0xd7/0x160
[   89.130461][ T5722]  geneve_netdevice_event+0x6a/0x80
[   89.132598][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.134629][ T5722]  call_netdevice_notifiers+0x88/0xc0
[   89.136755][ T5722]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[   89.139188][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.141264][ T5722]  register_netdevice+0x1608/0x1ae0
[   89.143386][ T5722]  nsim_create+0xae8/0xf10
[   89.145345][ T5722]  __nsim_dev_port_add+0x6b6/0xb10
[   89.147116][ T5722]  nsim_dev_port_add_all+0x37/0xf0
[   89.148737][ T5722]  nsim_dev_reload_up+0x451/0x780
[   89.150295][ T5722]  devlink_reload+0x4ec/0x8d0
[   89.151779][ T5722]  devlink_nl_reload_doit+0xb35/0xd50
[   89.153481][ T5722]  genl_family_rcv_msg_doit+0x215/0x300
[   89.155217][ T5722]  genl_rcv_msg+0x60e/0x790
[   89.156648][ T5722]  netlink_rcv_skb+0x208/0x470
[   89.158159][ T5722]  genl_rcv+0x28/0x40
[   89.159427][ T5722]  netlink_unicast+0x82f/0x9e0
[   89.160932][ T5722]  netlink_sendmsg+0x805/0xb30
[   89.162423][ T5722]  __sock_sendmsg+0x21c/0x270
[   89.163918][ T5722]  ____sys_sendmsg+0x505/0x830
[   89.165605][ T5722]  ___sys_sendmsg+0x21f/0x2a0
[   89.167495][ T5722]  __x64_sys_sendmsg+0x19b/0x260
[   89.169453][ T5722]  do_syscall_64+0xfa/0x3b0
[   89.170861][ T5722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.172679][ T5722] 
[   89.173457][ T5722] The buggy address belongs to the object at ffff88802384a000
[   89.173457][ T5722]  which belongs to the cache kmalloc-256 of size 256
[   89.177758][ T5722] The buggy address is located 176 bytes inside of
[   89.177758][ T5722]  freed 256-byte region [ffff88802384a000, ffff88802384a100)
[   89.181963][ T5722] 
[   89.182739][ T5722] The buggy address belongs to the physical page:
[   89.184735][ T5722] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2384a
[   89.187439][ T5722] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   89.190164][ T5722] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   89.193014][ T5722] page_type: f5(slab)
[   89.194263][ T5722] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122
[   89.196910][ T5722] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   89.199537][ T5722] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122
[   89.202150][ T5722] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   89.204732][ T5722] head: 00fff00000000001 ffffea00008e1281 00000000ffffffff 00000000ffffffff
[   89.207274][ T5722] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   89.209988][ T5722] page dumped because: kasan: bad access detected
[   89.212274][ T5722] page_owner tracks the page as allocated
[   89.214331][ T5722] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 57300171460, free_ts 56387531213
[   89.221014][ T5722]  post_alloc_hook+0x240/0x2a0
[   89.222630][ T5722]  get_page_from_freelist+0x21e4/0x22c0
[   89.224586][ T5722]  __alloc_frozen_pages_noprof+0x181/0x370
[   89.226768][ T5722]  alloc_pages_mpol+0x232/0x4a0
[   89.228537][ T5722]  allocate_slab+0x8a/0x370
[   89.230135][ T5722]  ___slab_alloc+0xbeb/0x1420
[   89.231967][ T5722]  __kmalloc_noprof+0x305/0x4f0
[   89.233856][ T5722]  fib_create_info+0x1728/0x3210
[   89.235748][ T5722]  fib_table_insert+0xc6/0x1b50
[   89.237632][ T5722]  fib_magic+0x2c4/0x390
[   89.239203][ T5722]  fib_add_ifaddr+0x144/0x5f0
[   89.240879][ T5722]  fib_netdev_event+0x382/0x490
[   89.242633][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.244343][ T5722]  __dev_notify_flags+0x18d/0x2e0
[   89.246178][ T5722]  netif_change_flags+0xe8/0x1a0
[   89.247908][ T5722]  do_setlink+0xc55/0x41c0
[   89.249487][ T5722] page last free pid 5854 tgid 5854 stack trace:
[   89.251915][ T5722]  __free_frozen_pages+0xbc4/0xd30
[   89.253703][ T5722]  __slab_free+0x303/0x3c0
[   89.255060][ T5722]  qlist_free_all+0x97/0x140
[   89.256548][ T5722]  kasan_quarantine_reduce+0x148/0x160
[   89.258282][ T5722]  __kasan_slab_alloc+0x22/0x80
[   89.259753][ T5722]  __kmalloc_cache_noprof+0x1be/0x3d0
[   89.261361][ T5722]  netdevice_event+0x3a1/0x8a0
[   89.262868][ T5722]  notifier_call_chain+0x1b6/0x3e0
[   89.264462][ T5722]  __dev_notify_flags+0x18d/0x2e0
[   89.266028][ T5722]  netif_change_flags+0xe8/0x1a0
[   89.267551][ T5722]  do_setlink+0xc55/0x41c0
[   89.268952][ T5722]  rtnl_newlink+0x160b/0x1c70
[   89.270421][ T5722]  rtnetlink_rcv_msg+0x7cf/0xb70
[   89.271988][ T5722]  netlink_rcv_skb+0x208/0x470
[   89.273440][ T5722]  netlink_unicast+0x82f/0x9e0
[   89.274908][ T5722]  netlink_sendmsg+0x805/0xb30
[   89.276342][ T5722] 
[   89.277080][ T5722] Memory state around the buggy address:
[   89.278725][ T5722]  ffff888023849f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   89.281156][ T5722]  ffff88802384a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.283610][ T5722] >ffff88802384a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.285965][ T5722]                                      ^
[   89.288017][ T5722]  ffff88802384a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   89.290710][ T5722]  ffff88802384a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   89.293582][ T5722] ==================================================================
[   89.320770][ T5722] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   89.323192][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[   89.326873][ T5722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.330304][ T5722] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   89.332540][ T5722] Call Trace:
[   89.333578][ T5722]  <TASK>
[   89.334469][ T5722]  dump_stack_lvl+0x99/0x250
[   89.335866][ T5722]  ? __asan_memcpy+0x40/0x70
[   89.337307][ T5722]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.338925][ T5722]  ? __pfx__printk+0x10/0x10
[   89.340367][ T5722]  vpanic+0x281/0x750
[   89.341619][ T5722]  ? preempt_schedule+0xae/0xc0
[   89.343150][ T5722]  ? __pfx_vpanic+0x10/0x10
[   89.344558][ T5722]  ? preempt_schedule_common+0x83/0xd0
[   89.346236][ T5722]  ? preempt_schedule+0xae/0xc0
[   89.347758][ T5722]  ? __pfx_preempt_schedule+0x10/0x10
[   89.349444][ T5722]  panic+0xb9/0xc0
[   89.350619][ T5722]  ? __pfx_panic+0x10/0x10
[   89.351986][ T5722]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   89.353780][ T5722]  ? __mutex_lock+0x147/0x1350
[   89.355223][ T5722]  check_panic_on_warn+0x89/0xb0
[   89.356780][ T5722]  ? __mutex_lock+0x147/0x1350
[   89.358277][ T5722]  end_report+0x78/0x160
[   89.359612][ T5722]  kasan_report+0x129/0x150
[   89.361049][ T5722]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.362900][ T5722]  ? __mutex_lock+0x147/0x1350
[   89.364355][ T5722]  __mutex_lock+0x147/0x1350
[   89.365811][ T5722]  ? __mutex_lock+0x5bb/0x1350
[   89.367312][ T5722]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[   89.369237][ T5722]  ? __pfx___mutex_lock+0x10/0x10
[   89.370830][ T5722]  ? __lock_acquire+0xab9/0xd20
[   89.372363][ T5722]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[   89.374227][ T5722]  ? process_scheduled_works+0x9ef/0x17b0
[   89.376013][ T5722]  ? process_scheduled_works+0x9ef/0x17b0
[   89.377757][ T5722]  process_scheduled_works+0xae1/0x17b0
[   89.379467][ T5722]  ? __pfx_process_scheduled_works+0x10/0x10
[   89.381340][ T5722]  worker_thread+0x8a0/0xda0
[   89.382791][ T5722]  kthread+0x711/0x8a0
[   89.384059][ T5722]  ? __pfx_worker_thread+0x10/0x10
[   89.385596][ T5722]  ? __pfx_kthread+0x10/0x10
[   89.387023][ T5722]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.388621][ T5722]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.390230][ T5722]  ? __pfx_kthread+0x10/0x10
[   89.391670][ T5722]  ret_from_fork+0x3fc/0x770
[   89.393103][ T5722]  ? __pfx_ret_from_fork+0x10/0x10
[   89.394694][ T5722]  ? __switch_to_asm+0x39/0x70
[   89.396179][ T5722]  ? __switch_to_asm+0x33/0x70
[   89.397676][ T5722]  ? __pfx_kthread+0x10/0x10
[   89.399140][ T5722]  ret_from_fork_asm+0x1a/0x30
[   89.400628][ T5722]  </TASK>
[   89.402247][ T5722] Kernel Offset: disabled
[   89.403614][ T5722] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:43:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002fef130
R8 =ffff8881087c8237 R9 =1ffff110210f9046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018f4 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000002c2 CR3=000000003d3bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7d947a7498 00007f7d947a7470 XMM03=00007f7d947a74a8 00007f7d947a74a0
XMM04=00007f7d9530d100 00007f7d947a7460 XMM05=00007f7d947a7478 00007f7d947a74c0
XMM06=00007f7d947a74b8 00007f7d947a74b0 XMM07=00007f7d947a74a8 00007f7d947a74a0
XMM08=2607019a6840bc7e b72c405b5779320f XMM09=0000000000000000 00007f7d94612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff84c47a8b RBX=ffff888112b9be18 RCX=ffff88810681d640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000346fce0
R8 =ffff888112b9be1b R9 =1ffff110225737c3 R10=dffffc0000000000 R11=ffffed10225737c4
R12=ffff888112b9be18 R13=dffffc0000000000 R14=dffffc0000000000 R15=ffff888109403c80
RIP=ffffffff81bfae81 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555572650500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557266b5c8 CR3=0000000027482000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fed81c12e53
XMM06=0000000000000000 00007fed81c12e4d XMM07=0000000000000000 00007fed81c12e61
XMM08=0000000000000000 00007fed81c12ee7 XMM09=0000000000000000 00007fed81c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
