last executing test programs:

2.465162402s ago: executing program 2 (id=475):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r3 = socket(0x2, 0x80805, 0xfffffffe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000080))
r5 = gettid()
r6 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="16000000000000002900000043"], 0x18}}], 0x1, 0x4000880)
syz_open_procfs$namespace(r5, &(0x7f0000000340))
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback, @in=@loopback}}, {{@in=@broadcast}}}, &(0x7f0000000480)=0xe8)
r7 = socket$netlink(0x10, 0x3, 0x10)
getsockname$packet(r3, &(0x7f00000002c0), &(0x7f0000000300)=0x14)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9)
accept$netrom(r3, &(0x7f0000000200)={{0x3, @rose}, [@default, @bcast, @default, @netrom, @default, @netrom, @rose, @default]}, &(0x7f0000000400)=0x48)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="140004006e696376663000ffffffff00000000000800050008000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x4000050)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_bond\x00', {0x2}, 0x4})

1.993270796s ago: executing program 2 (id=481):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
sendmmsg(r0, 0x0, 0x0, 0x4040805)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x20, @local}, 0x2, {0x2, 0x4e23, @multicast1}, 'wg1\x00'})
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
sendmsg$nl_route(r9, 0x0, 0x20000004)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x14000800)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r11)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$sock_int(r12, 0x1, 0x33, &(0x7f0000000040)=0x1000, 0x4)

1.673275506s ago: executing program 1 (id=489):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1.514216063s ago: executing program 1 (id=491):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0}, 0x94)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, 0x0, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100))
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.511648332s ago: executing program 2 (id=492):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x9, 0x4, 0x0, 0xf8, 0xf, 0x5, 0x76}, 0xc) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x9, 0x4, 0x0, 0xf8, 0xf, 0x5, 0x76}, 0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000001c0))
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
socket$tipc(0x1e, 0x5, 0x0) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xa, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)
close(0x3)

1.414587546s ago: executing program 1 (id=494):
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000280))
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x208, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1f4, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1000000}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x98, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x1}}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x208}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}})
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000300)=0xfffffffffffffffd, 0x4)
connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r7)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x40}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6)
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880099fff95f0c742cb546281c22b8ee4118546c5b69b21b176199bbe27941f12e7891be2535b230dbb5c64534f40ccb684ac4000003beb728f0143b990491bdba09b2da10d23dc6676a3b163406000000000000008cc686bea2546518640132564f", @ANYRES16=r10, @ANYBLOB="0100000000000000000006000009080004006401010008000500e00000020f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0)
sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r3, 0x1)

1.409931474s ago: executing program 2 (id=495):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004805}, 0x40040c4)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="75b354725b57f9abc175334332407a55db531ac573f9bb1aeafeff126b5a2c0ca4a38b6009bae236d1e797d9d7090e870a77b8dcd2c4d105ba63cf99a212458cc5f84cebc4c31ad7748c85dff19dea4d30f54139604566fa224c7127776c8305e245a8cc62ce9ee0851a0cdfd08e22"], 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1.336679876s ago: executing program 2 (id=496):
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = socket(0x2b, 0x80801, 0x1)
shutdown(r0, 0xfffffffffffffffd)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000000000000800000008000300", @ANYRES64=r8], 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRESDEC, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)

1.33526476s ago: executing program 0 (id=497):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, 0x4, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00'})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @remote, @dev}, &(0x7f0000000040)=0xc)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0xffffffff000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x19, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x10000, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x3)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x6a, 0x7, 0x2, 0x6, 0x25, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x700, 0x8000, 0x400, 0xa4f5}})
socket$vsock_stream(0x28, 0x1, 0x0)

617.118581ms ago: executing program 0 (id=498):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x4, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)

569.682315ms ago: executing program 1 (id=499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
r4 = accept4$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14, 0x800)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x8000, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/74}, {&(0x7f0000000340)=""/84}, {&(0x7f0000000400)=""/55}, {&(0x7f0000000680)=""/207}], 0x41, 0x0, 0xffffffffffffffe5}, 0xb3}, {{&(0x7f0000000540)=@alg, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002a80)=""/4100, 0xfffffffffffffdf0}, {&(0x7f00000017c0)=""/116}, {&(0x7f0000001840)=""/219}, {&(0x7f0000001940)=""/115}], 0x0, &(0x7f00000019c0)=""/38}, 0x9ec6}], 0xa, 0x0, 0x0)

515.151256ms ago: executing program 0 (id=500):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r1, 0x0, 0x80) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async)
close(0x3) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="060000000400000004000062000100000000000090c05d492e706f30cd7c74423a1d6883c8eb051d4b8d35d7e6f9a02b168e9534fb9c73b140e35fc4756ed4d8d5463f9192dd26c8157b5ac984275d15ce653b50eff15afd942110d905f5ae9af58564fc3ce0652cc95589a5b5c38f75429b46e0a9931f00f2f4445f343f0ef9bfdc178cae68897defba4411b91b78e6789573f3fadf65809f05a1a8bfea6d86e453d0e230", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r11=>0x0})
bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, r11, 0x3e}, 0x10) (async)
r12 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) (async)
r14 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

514.466206ms ago: executing program 2 (id=501):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c008f086112f902fcc9647a14441f00001c00010029bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="80007f0a0a0002000180c2000003000004000e80"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
socket$kcm(0x29, 0x5, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f00000005c0)={[0xffffffff]}, 0x8)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socket(0x8, 0x5, 0x80000000) (async)
socket(0x8, 0x5, 0x80000000)
accept4$packet(r6, 0x0, 0x0, 0x100c00)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00'/49], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00'/49], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={<r7=>0x0, @empty, @dev}, &(0x7f0000000100)=0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, <r8=>0x0}, &(0x7f0000000200)=0xc)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={<r10=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getsadinfo={0x15c, 0x23, 0x200, 0x70bd25, 0x25dfdbff, 0x0, [@algo_crypt={0x99, 0x2, {{'lrw-twofish-3way\x00'}, 0x288, "844a3469af2bbde961c81f0267166e013a50a7f06c89a0d0519bdeaa62711983fece37168c2ebbd0afee1ddcc97445135daa8b9e9495e6d3dfb33070bb0015bb3b1bd06b7d32c5825010dce85edc4ee548"}}, @policy={0xac, 0x7, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0xfe83, 0x4e24, 0x7fff, 0x2, 0x20, 0x20, 0x3b, r7, r8}, {0x40, 0x30e, 0xb, 0x4, 0xfffffffffffff9f4, 0x0, 0x1, 0x3}, {0xc41, 0x6, 0x2}, 0x7, 0x6e6bbc, 0x2, 0x0, 0x3, 0x2}}]}, 0x15c}}, 0x4000) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getsadinfo={0x15c, 0x23, 0x200, 0x70bd25, 0x25dfdbff, 0x0, [@algo_crypt={0x99, 0x2, {{'lrw-twofish-3way\x00'}, 0x288, "844a3469af2bbde961c81f0267166e013a50a7f06c89a0d0519bdeaa62711983fece37168c2ebbd0afee1ddcc97445135daa8b9e9495e6d3dfb33070bb0015bb3b1bd06b7d32c5825010dce85edc4ee548"}}, @policy={0xac, 0x7, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0xfe83, 0x4e24, 0x7fff, 0x2, 0x20, 0x20, 0x3b, r7, r8}, {0x40, 0x30e, 0xb, 0x4, 0xfffffffffffff9f4, 0x0, 0x1, 0x3}, {0xc41, 0x6, 0x2}, 0x7, 0x6e6bbc, 0x2, 0x0, 0x3, 0x2}}]}, 0x15c}}, 0x4000)

415.916952ms ago: executing program 0 (id=502):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d1ff382825f596c398ce353cf816702001b55bccdd79aee032d894a516054f7b60c928cc2450843a1b140c077a247c1660fbb5f0179629d4ff9679503090f2d4e0dba541560a96f7fcac9acef415f23ea9f5af31d9dcd1cbf1348b3687991e7d0246e02fde095845f11780a839b9b18d86cb09745e3ada4490d88a"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x696d, 0xfffffffffffffec5)
sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
recvfrom(r3, &(0x7f0000000200)=""/131, 0x83, 0x2000, 0x0, 0x0) (async)
recvfrom(r3, &(0x7f0000000200)=""/131, 0x83, 0x2000, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000002c0))
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGCAUSE(r6, 0x89e0, 0xffffffffffffffff)
r7 = socket$inet6(0x2d, 0x2, 0x800)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x11d, 0x20, 0x0, 0x0) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x11d, 0x20, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r9, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r9, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet(0xa, 0x801, 0x84) (async)
r10 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e22, @multicast2}, 0x10)
listen(r10, 0x28) (async)
listen(r10, 0x28)
accept4(r10, 0x0, 0x0, 0x0) (async)
r11 = accept4(r10, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

414.584628ms ago: executing program 0 (id=503):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r3], 0x38}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ce5d508f"], 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x0, 0x0, 0x74, 0x2, 0x0, 0x0, 0x6, 0x0, @multicast1, @local, {[@timestamp={0x44, 0xc, 0x78, 0x0, 0xf, [0x6, 0x100]}, @rr={0x7, 0xf, 0xf1, [@loopback, @multicast1, @multicast2]}, @noop, @ssrr={0x89, 0x7, 0x95, [@empty]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0xd, "8fe14aa94780d936757de3"}]}]}}, {{0x4001, 0x80, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x28)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$can_bcm(0x1d, 0x2, 0x2)

266.169804ms ago: executing program 1 (id=504):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r1)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESDEC, @ANYRES64=r2, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "8f1151239582"}})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x50, r4, 0x100000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd8, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x56, 0xa9, @random="3b2d062d550adcd7a6586d861695ec78eb76f9667c9e21a1ffa47cd298c30a6397bf11c93c87adb1ef3cdfd065f7479dcb23b30224da8d3f2515f238b4fe68c56061f30dbfcdaa356eae0dcb974bb9600c27"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xcf7}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x34}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000040}, 0xe56ff66849e85737)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004844}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000325bd7000fbdbdf25050000000c0009800800020003000000040002806afad3033ac868bb7a91d52cbd90"], 0x24}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x1000})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-x86\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)

264.784056ms ago: executing program 0 (id=505):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@multicast2, 0x0, 0x8966, 0x4e20, 0xfffc, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x80000001, 0x0, 0x7fffffff, 0x100000000006, 0x9, 0x4, 0x40000000000000}, {0x7, 0x3, 0x53e1, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x34ff, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x60, 0x7, 0x1, 0x0, 0xc29600}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0xc08, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbdc, 0x3, 0x0, 0x1, [{0x9dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x760, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x750, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "b531b3b2b29af01498bca728bd401e57bc0de08598003c1c3d91e1b42021ec5a71776e9d23c99070b3531eb19b4efd974581a88e93c792994c62ba8ae1bbc6153aed5600f13c005c00d5c5f78869d29a6a4ce38ee7c89248acb8ff7bc965f74a212c0b1405975db1508b0056838a75aefd948f7df96099d7cb2c0cac8b45a40f5edf1f81addaeb189b7fdf8f39251e77fdb4521415ecfd333c005210bc6164c3398770b8dfe1dfa4fa27"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x93, 0x1, "2d6bc7b9a3eaf93e66e44096ef02e1bf3eabddf3cb83cdd7a2a44d1ab366b0af38f25224e5bc3ca254a9bd152e24bac00ddfdedfc51b44124957e9fb14f20a0d7ee20abdb6345aa5aac38ed50ce7fe8e8245fb37f5ff896baf4721492a724252bf400d9c034ae091f60dfe1505219efa740e1e47cc11f03adde140ce8439242ba275fc09707bc8f8be83c3914a5cbe"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x200, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "e62622d412029ac6866da8e71837c1ef6dc823ba1a67bace8ec7a654e8c158bbf90e882b1ff3e943540cd7584200b3aad5269b8785549d2ae9f0874dbd5007ea7e9b86d815b811704ace3e5340d39088b0d20414b6cd1b2debe0dd421882f7d566d137ebf31ed6696cd4f91c08ca93a3e1cbf9a3fe1da65e285135776a6fa3f39798f3488af2f557fb5206b00ca12494af85d3b2b4a3ccedc9d4064507a89613cc175b38f7b42a7361fd8f7b1318db"}, @NFTA_DATA_VALUE={0xe0, 0x1, "85a459e09d959f71fa70e0981929ec6519f9d59baea9c75b9f005c2a3be12cd6bd44aee21181148ceb92dbd790acdcd838bb9fda0913578674438907b03a35deb567c7efee5ad4f8ec3da84e892d19612cb5a76d85e1432aebb6f564383b38c11035d6c6d97e65487dfbfa76de80039cf90bb5f629ed2477273d28d9644e3ed321546be841ed78cf44867b4ac8124b5a34cff2a865fef5f32bbe229339ce08e7311f4319f364da6f95abe54c00944bd22a553d4c28edb8a6ad71153e0b7f2514590b75b6451ec963843614fdefce810bf99e0bfdee76bfd711dcc3f2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_TO_DATA={0x398, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc, 0x1, "4cfee5e7430c53f4"}, @NFTA_DATA_VALUE={0xab, 0x1, "980d34e14877f18a99ea91a1b2e54514e7674c158a9f7f2f1afa36175fb00c8e4c0373d34da978f24929d61c2278711d585d268d5d40deff113e2af794c78a221d8623ac61fd8ca10f1f4bc21f3597d5247406ed20e4c3027b55d0b17e9d0e90fc26f694b6eae13fdd84eecef14158be7f2e2724fa0d2afbf72e7356a7be42ef0ef317f4fdb62741cf72050ac06d6a85a16e066da5519179d44de5d288a59accecfa7a2e60ce02"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "f5043921988d730d2ed28b6d5669783d2bce420c44e85b4285c42b93982135211c707b1ad075ab7c5b5c8b10c765f666ae28e7e5c5ebf4a15d2325043bb855c01dc63007078e4e22373870b4a117af73244f9a76bc9d7b77ebd00ec090da6107dbebb5bf451f97ffa4d54b8bae527f6983c804358cb7e4944c2e9c86e8713c683c74d49fb17ff929e924"}, @NFTA_DATA_VALUE={0x38, 0x1, "d07fa1d526228dbc49168a7f41efd3b4ba34dfd0f897140c57b3ddd3d9a5a483b796a3ad875943b93023a0cd39aa1bdf7e56c5ae"}, @NFTA_DATA_VALUE={0xa6, 0x1, "0e8c08b87bb8f863963994681606582ad049b28317d5201071d955f397f220ab6376785bc13b8eeac8a30a927cca2a7620db27dee32d07040d26c8b9265f0f5ff5caef5bfd5ed6ea538b9333fc0158813268ff37d326e5dbacfdc56051a179ea2a81d9e22a7e30ad50b5946383a901ce1d4a374c4058bcc0d3d62168e3e2b6d5b743c7b70b4c7a5d4cfec0ce80779f2fdb5b5e13d6b97b714e805d00a9cf6c108894"}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4d53785689b16c36}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "24ab3807284d54ae1721bccfab85654e2f81ca5f6521283bbea84144134b5e58b304183127cfb6c1e2c8cb633669156943607a97dcd68beed2c9b1e75890082ba7b5d035d8caa64504622651e2cb178ea513cac12f5c80490b2409c6aa74737c29e9983702385c8964c4df7cc3efffd3761ef385d16f2d37cc27bb292e4a790e6107eb5c76ef4a26a539523f58a3842af23560f72072f92c656e5c51b8502d4df8e9ec6e2fcb8d382a7017557df49b89ef05f09280b1eb52d15ddfec32bdcef55c4377398ed97fb39c34bc433b66140d3a4b0eb00eac14873c87af813136b16e272259780508708865f7"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "65c9b259365184a55e22b38baa3bf7014933d9f7ecb7c5055acdd39c2d90a0f8c1203aa2b2df36a426647afd6d0483b3babce1669a9029b5adab5f7407872989973190199dbebc317c3552ce8058f948cfe21da3746b26110cf5dac1ff598adbe9af9f3157f86c2a283a02c2e3166e48abad8478b7096abc05d48a6c2ca6436d1361cd3a924925d670a6e1c19a461adb3cd979d51f621dcb098804dee931d51bf830407d49dbd93812c77161882bc0f6ca1a4fd4e3d72211a97a163a9d4540cb9f72da2848"}]}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "74a5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "1e08e6e2c7303ea9cefa0fb443a3b47c5eab802f5e38aa1ee20c4a410e2c17f4a10ece3665"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x32, 0x1, "69a5407982cc352f688ce88698c6a742107a88a834aca74ff3de87ac845a6081923b52869392582e0fdfff9f284f"}, @NFTA_DATA_VALUE={0x45, 0x1, "b391ac9c5fa6aa72d9099bd31eb1b15633d4bc22e12893ecda4480768684fccc9480f60c6295dbf662509621915bc1c8847317f80a555b718a456f592dae1e4e13"}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_USERDATA={0x99, 0x6, 0x1, 0x0, "e0f5caef2d2cdbc46c9fa1d298b9a1ebcca9ffcc54c1773d4d7f5893408fc1cabf8baf8acb3e1ca2e0e87549ff2d58b78667db1ee9145073c5ff3ff58043b62bfd9ee4a0110e7e5a1d6d827a35eb3d141f56daedc0bb2dcf8d16c0ee831b9a5d829ad17a56e85f18829fcf05a89901f0823e4fdd1d068b446dcf0ae3cecfd8c9e6a5aaa66ce640723d5d5e9ce8230fb528af2d8d54"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcb0}}, 0x4050)

104.317492ms ago: executing program 32 (id=505):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@multicast2, 0x0, 0x8966, 0x4e20, 0xfffc, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x80000001, 0x0, 0x7fffffff, 0x100000000006, 0x9, 0x4, 0x40000000000000}, {0x7, 0x3, 0x53e1, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x34ff, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x60, 0x7, 0x1, 0x0, 0xc29600}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0xc08, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbdc, 0x3, 0x0, 0x1, [{0x9dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x760, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x750, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "b531b3b2b29af01498bca728bd401e57bc0de08598003c1c3d91e1b42021ec5a71776e9d23c99070b3531eb19b4efd974581a88e93c792994c62ba8ae1bbc6153aed5600f13c005c00d5c5f78869d29a6a4ce38ee7c89248acb8ff7bc965f74a212c0b1405975db1508b0056838a75aefd948f7df96099d7cb2c0cac8b45a40f5edf1f81addaeb189b7fdf8f39251e77fdb4521415ecfd333c005210bc6164c3398770b8dfe1dfa4fa27"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x93, 0x1, "2d6bc7b9a3eaf93e66e44096ef02e1bf3eabddf3cb83cdd7a2a44d1ab366b0af38f25224e5bc3ca254a9bd152e24bac00ddfdedfc51b44124957e9fb14f20a0d7ee20abdb6345aa5aac38ed50ce7fe8e8245fb37f5ff896baf4721492a724252bf400d9c034ae091f60dfe1505219efa740e1e47cc11f03adde140ce8439242ba275fc09707bc8f8be83c3914a5cbe"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x200, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "e62622d412029ac6866da8e71837c1ef6dc823ba1a67bace8ec7a654e8c158bbf90e882b1ff3e943540cd7584200b3aad5269b8785549d2ae9f0874dbd5007ea7e9b86d815b811704ace3e5340d39088b0d20414b6cd1b2debe0dd421882f7d566d137ebf31ed6696cd4f91c08ca93a3e1cbf9a3fe1da65e285135776a6fa3f39798f3488af2f557fb5206b00ca12494af85d3b2b4a3ccedc9d4064507a89613cc175b38f7b42a7361fd8f7b1318db"}, @NFTA_DATA_VALUE={0xe0, 0x1, "85a459e09d959f71fa70e0981929ec6519f9d59baea9c75b9f005c2a3be12cd6bd44aee21181148ceb92dbd790acdcd838bb9fda0913578674438907b03a35deb567c7efee5ad4f8ec3da84e892d19612cb5a76d85e1432aebb6f564383b38c11035d6c6d97e65487dfbfa76de80039cf90bb5f629ed2477273d28d9644e3ed321546be841ed78cf44867b4ac8124b5a34cff2a865fef5f32bbe229339ce08e7311f4319f364da6f95abe54c00944bd22a553d4c28edb8a6ad71153e0b7f2514590b75b6451ec963843614fdefce810bf99e0bfdee76bfd711dcc3f2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_TO_DATA={0x398, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xc, 0x1, "4cfee5e7430c53f4"}, @NFTA_DATA_VALUE={0xab, 0x1, "980d34e14877f18a99ea91a1b2e54514e7674c158a9f7f2f1afa36175fb00c8e4c0373d34da978f24929d61c2278711d585d268d5d40deff113e2af794c78a221d8623ac61fd8ca10f1f4bc21f3597d5247406ed20e4c3027b55d0b17e9d0e90fc26f694b6eae13fdd84eecef14158be7f2e2724fa0d2afbf72e7356a7be42ef0ef317f4fdb62741cf72050ac06d6a85a16e066da5519179d44de5d288a59accecfa7a2e60ce02"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "f5043921988d730d2ed28b6d5669783d2bce420c44e85b4285c42b93982135211c707b1ad075ab7c5b5c8b10c765f666ae28e7e5c5ebf4a15d2325043bb855c01dc63007078e4e22373870b4a117af73244f9a76bc9d7b77ebd00ec090da6107dbebb5bf451f97ffa4d54b8bae527f6983c804358cb7e4944c2e9c86e8713c683c74d49fb17ff929e924"}, @NFTA_DATA_VALUE={0x38, 0x1, "d07fa1d526228dbc49168a7f41efd3b4ba34dfd0f897140c57b3ddd3d9a5a483b796a3ad875943b93023a0cd39aa1bdf7e56c5ae"}, @NFTA_DATA_VALUE={0xa6, 0x1, "0e8c08b87bb8f863963994681606582ad049b28317d5201071d955f397f220ab6376785bc13b8eeac8a30a927cca2a7620db27dee32d07040d26c8b9265f0f5ff5caef5bfd5ed6ea538b9333fc0158813268ff37d326e5dbacfdc56051a179ea2a81d9e22a7e30ad50b5946383a901ce1d4a374c4058bcc0d3d62168e3e2b6d5b743c7b70b4c7a5d4cfec0ce80779f2fdb5b5e13d6b97b714e805d00a9cf6c108894"}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4d53785689b16c36}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "24ab3807284d54ae1721bccfab85654e2f81ca5f6521283bbea84144134b5e58b304183127cfb6c1e2c8cb633669156943607a97dcd68beed2c9b1e75890082ba7b5d035d8caa64504622651e2cb178ea513cac12f5c80490b2409c6aa74737c29e9983702385c8964c4df7cc3efffd3761ef385d16f2d37cc27bb292e4a790e6107eb5c76ef4a26a539523f58a3842af23560f72072f92c656e5c51b8502d4df8e9ec6e2fcb8d382a7017557df49b89ef05f09280b1eb52d15ddfec32bdcef55c4377398ed97fb39c34bc433b66140d3a4b0eb00eac14873c87af813136b16e272259780508708865f7"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "65c9b259365184a55e22b38baa3bf7014933d9f7ecb7c5055acdd39c2d90a0f8c1203aa2b2df36a426647afd6d0483b3babce1669a9029b5adab5f7407872989973190199dbebc317c3552ce8058f948cfe21da3746b26110cf5dac1ff598adbe9af9f3157f86c2a283a02c2e3166e48abad8478b7096abc05d48a6c2ca6436d1361cd3a924925d670a6e1c19a461adb3cd979d51f621dcb098804dee931d51bf830407d49dbd93812c77161882bc0f6ca1a4fd4e3d72211a97a163a9d4540cb9f72da2848"}]}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "74a5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "1e08e6e2c7303ea9cefa0fb443a3b47c5eab802f5e38aa1ee20c4a410e2c17f4a10ece3665"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x32, 0x1, "69a5407982cc352f688ce88698c6a742107a88a834aca74ff3de87ac845a6081923b52869392582e0fdfff9f284f"}, @NFTA_DATA_VALUE={0x45, 0x1, "b391ac9c5fa6aa72d9099bd31eb1b15633d4bc22e12893ecda4480768684fccc9480f60c6295dbf662509621915bc1c8847317f80a555b718a456f592dae1e4e13"}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_USERDATA={0x99, 0x6, 0x1, 0x0, "e0f5caef2d2cdbc46c9fa1d298b9a1ebcca9ffcc54c1773d4d7f5893408fc1cabf8baf8acb3e1ca2e0e87549ff2d58b78667db1ee9145073c5ff3ff58043b62bfd9ee4a0110e7e5a1d6d827a35eb3d141f56daedc0bb2dcf8d16c0ee831b9a5d829ad17a56e85f18829fcf05a89901f0823e4fdd1d068b446dcf0ae3cecfd8c9e6a5aaa66ce640723d5d5e9ce8230fb528af2d8d54"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcb0}}, 0x4050)

55.879806ms ago: executing program 1 (id=507):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14)

0s ago: executing program 33 (id=507):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44288' (ED25519) to the list of known hosts.
syzkaller login: [   56.521088][ T5833] cgroup: Unknown subsys name 'net'
[   56.649923][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.656396][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.481472][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.323368][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.327257][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.330666][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.334474][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.342090][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.345975][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.348471][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.351234][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.353935][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.387360][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.413300][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.425318][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.431775][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.441470][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.448958][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.700497][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   63.761205][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   63.830233][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   63.845398][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.848933][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.851971][ T5848] bridge_slave_0: entered allmulticast mode
[   63.856034][ T5848] bridge_slave_0: entered promiscuous mode
[   63.882371][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.885265][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.888451][ T5848] bridge_slave_1: entered allmulticast mode
[   63.892209][ T5848] bridge_slave_1: entered promiscuous mode
[   63.956763][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.974648][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.977085][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.979346][ T5852] bridge_slave_0: entered allmulticast mode
[   63.981957][ T5852] bridge_slave_0: entered promiscuous mode
[   63.986948][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.997601][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.000497][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.003207][ T5852] bridge_slave_1: entered allmulticast mode
[   64.007261][ T5852] bridge_slave_1: entered promiscuous mode
[   64.026166][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.028358][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.030679][ T5857] bridge_slave_0: entered allmulticast mode
[   64.033306][ T5857] bridge_slave_0: entered promiscuous mode
[   64.038278][ T5848] team0: Port device team_slave_0 added
[   64.040705][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.042976][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.045280][ T5857] bridge_slave_1: entered allmulticast mode
[   64.048187][ T5857] bridge_slave_1: entered promiscuous mode
[   64.080194][ T5848] team0: Port device team_slave_1 added
[   64.085997][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.114347][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.120480][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.123786][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.126336][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.134052][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.156941][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.161285][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.163410][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.171242][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.191598][ T5852] team0: Port device team_slave_0 added
[   64.200672][ T5857] team0: Port device team_slave_0 added
[   64.204599][ T5852] team0: Port device team_slave_1 added
[   64.208681][ T5857] team0: Port device team_slave_1 added
[   64.259356][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.261573][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.270180][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.274000][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.276931][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.284521][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.291703][ T5848] hsr_slave_0: entered promiscuous mode
[   64.294046][ T5848] hsr_slave_1: entered promiscuous mode
[   64.296975][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.299143][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.307351][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.311242][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.313384][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.321688][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.362007][ T5852] hsr_slave_0: entered promiscuous mode
[   64.364449][ T5852] hsr_slave_1: entered promiscuous mode
[   64.366699][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   64.368512][ T5852] Cannot create hsr debugfs directory
[   64.420670][ T5857] hsr_slave_0: entered promiscuous mode
[   64.423042][ T5857] hsr_slave_1: entered promiscuous mode
[   64.425195][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   64.427378][ T5857] Cannot create hsr debugfs directory
[   64.623579][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.629646][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.647790][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.664028][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.696422][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.709499][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.714854][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.729371][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.762905][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.769038][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.774211][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.780210][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.854713][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.881304][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   64.891706][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.894198][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.905196][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.909996][ T4073] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.912241][ T4073] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.934308][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   64.941970][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.955053][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.957429][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.971488][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   64.976687][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.979123][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.988790][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.991765][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.015553][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.018293][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.057536][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.212916][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.224134][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.266646][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.294364][ T5852] veth0_vlan: entered promiscuous mode
[   65.298779][ T5848] veth0_vlan: entered promiscuous mode
[   65.310038][ T5848] veth1_vlan: entered promiscuous mode
[   65.321343][ T5852] veth1_vlan: entered promiscuous mode
[   65.363969][ T5848] veth0_macvtap: entered promiscuous mode
[   65.378189][ T5848] veth1_macvtap: entered promiscuous mode
[   65.400933][ T5857] veth0_vlan: entered promiscuous mode
[   65.410005][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.415190][ T5852] veth0_macvtap: entered promiscuous mode
[   65.422834][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.430220][ T5852] veth1_macvtap: entered promiscuous mode
[   65.439213][   T54] Bluetooth: hci0: command tx timeout
[   65.441629][   T54] Bluetooth: hci1: command tx timeout
[   65.452916][ T5742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.459951][ T5742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.463754][ T5857] veth1_vlan: entered promiscuous mode
[   65.471454][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.480241][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.492565][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.513098][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.517206][ T5855] Bluetooth: hci2: command tx timeout
[   65.550073][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.554846][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.564601][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.572516][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.577796][ T5857] veth0_macvtap: entered promiscuous mode
[   65.596155][ T5857] veth1_macvtap: entered promiscuous mode
[   65.613526][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.617388][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.638821][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.653920][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.682941][ T5742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.683918][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.688501][ T5742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.693585][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.702066][ T5742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.705068][ T5742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.725642][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.728409][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.781295][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.781820][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.788347][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.825021][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.834840][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.867252][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.869730][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.943250][ T5917] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3'.
[   65.953679][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   65.958120][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.043316][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   66.062976][ T5929] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.071464][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.098924][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.134542][ T5939] netlink: 'syz.0.10': attribute type 10 has an invalid length.
[   66.141749][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   66.145180][ T5939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10'.
[   66.157621][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   66.205039][ T5945] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.322506][ T5952] netlink: 'syz.1.15': attribute type 12 has an invalid length.
[   66.325435][ T5952] netlink: 'syz.1.15': attribute type 11 has an invalid length.
[   66.391610][ T5961] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET)
[   66.861589][ T5988] geneve2: entered promiscuous mode
[   66.868590][ T5988] geneve2: entered allmulticast mode
[   66.872541][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[   66.879479][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[   66.990585][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.994944][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.122756][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.133671][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.254879][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[   67.265794][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[   67.268717][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.271645][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.274466][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.300220][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.311420][ T5990] syz.1.25 (5990) used greatest stack depth: 19960 bytes left
[   67.351892][ T6005] Zero length message leads to an empty skb
[   67.516275][ T5855] Bluetooth: hci1: command tx timeout
[   67.518338][ T5855] Bluetooth: hci0: command tx timeout
[   67.543862][ T6019] netlink: 'syz.2.33': attribute type 83 has an invalid length.
[   67.555014][ T6021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.597008][   T54] Bluetooth: hci2: command tx timeout
[   67.811607][ T6032] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.887648][ T6040] netlink: 'syz.1.36': attribute type 83 has an invalid length.
[   67.934482][ T6032] Illegal XDP return value 4294967262 on prog  (id 5) dev N/A, expect packet loss!
[   68.212408][ T6046] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   68.215203][ T6046] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   68.250819][ T6045] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   68.253798][ T6045] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   68.809426][ T6069] bridge_slave_0: left allmulticast mode
[   68.811616][ T6069] bridge_slave_0: left promiscuous mode
[   68.814257][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.822341][ T6069] bridge_slave_1: left allmulticast mode
[   68.824517][ T6069] bridge_slave_1: left promiscuous mode
[   68.832150][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.840434][ T6069] bond0: (slave bond_slave_0): Releasing backup interface
[   68.846497][ T6069] bond0: (slave bond_slave_1): Releasing backup interface
[   68.861666][ T6069] team0: Port device team_slave_0 removed
[   68.870321][ T6069] team0: Port device team_slave_1 removed
[   68.873165][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.877257][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.882629][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.885422][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.891264][ T6069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   69.077697][ T6021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.188667][ T6021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.288423][ T6021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.394992][ T5742] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.410039][ T5742] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.424450][ T5742] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.440463][ T5742] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.499087][ T6088] lo: entered allmulticast mode
[   69.501427][ T6088] unsupported nlmsg_type 40
[   69.510084][ T6087] lo: left allmulticast mode
[   69.518267][ T6086] netlink: 'syz.0.48': attribute type 21 has an invalid length.
[   69.555146][ T6091] sctp: [Deprecated]: syz.1.50 (pid 6091) Use of int in max_burst socket option.
[   69.555146][ T6091] Use struct sctp_assoc_value instead
[   69.596440][ T5855] Bluetooth: hci0: command tx timeout
[   69.598739][ T5855] Bluetooth: hci1: command tx timeout
[   69.676213][   T54] Bluetooth: hci2: command tx timeout
[   70.174811][ T6133] macvtap1: entered promiscuous mode
[   70.177403][ T6133] veth1_to_hsr: entered promiscuous mode
[   70.181242][ T6133] macvtap1: entered allmulticast mode
[   70.183435][ T6133] veth1_to_hsr: entered allmulticast mode
[   70.355400][ T6138] batadv1: entered allmulticast mode
[   70.360109][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv1
[   70.704509][ T6142] geneve2: left promiscuous mode
[   70.706286][ T6142] geneve2: left allmulticast mode
[   70.751343][ T5742] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.754786][ T5742] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[   70.759486][ T5742] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.763876][ T5742] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[   70.772570][ T5742] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.776603][ T5742] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[   70.780252][ T5742] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.783394][ T5742] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[   70.960001][ T6157] __nla_validate_parse: 27 callbacks suppressed
[   70.960012][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'.
[   70.964739][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.69'.
[   71.177305][ T6172] tipc: Started in network mode
[   71.186056][ T6172] tipc: Node identity da4812cc2c59, cluster identity 4711
[   71.189018][ T6172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.203758][ T6172] syzkaller0: entered promiscuous mode
[   71.206566][ T6172] syzkaller0: entered allmulticast mode
[   71.233186][ T6172] tipc: Resetting bearer <eth:syzkaller0>
[   71.250992][ T6171] tipc: Resetting bearer <eth:syzkaller0>
[   71.274367][ T6171] tipc: Disabling bearer <eth:syzkaller0>
[   71.281102][ T6176] validate_nla: 3 callbacks suppressed
[   71.281126][ T6176] netlink: 'syz.1.77': attribute type 10 has an invalid length.
[   71.282278][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.289438][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.297394][ T6176] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.354270][ T6178] IPVS: set_ctl: invalid protocol: 89 172.30.1.2:20001
[   71.404585][ T6181] vlan2: entered promiscuous mode
[   71.406504][ T6181] bond0: entered promiscuous mode
[   71.408088][ T6181] bond_slave_0: entered promiscuous mode
[   71.409966][ T6181] bond_slave_1: entered promiscuous mode
[   71.411825][ T6181] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   71.415105][ T6181] vlan2: entered allmulticast mode
[   71.417056][ T6181] bond0: entered allmulticast mode
[   71.418898][ T6181] bond_slave_0: entered allmulticast mode
[   71.420645][ T6181] bond_slave_1: entered allmulticast mode
[   71.422401][ T6181] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   71.451088][ T6184] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   71.453481][ T6184] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   71.676163][   T54] Bluetooth: hci1: command tx timeout
[   71.677927][   T54] Bluetooth: hci0: command tx timeout
[   71.755874][ T5855] Bluetooth: hci2: command tx timeout
[   71.818457][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   71.821915][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'.
[   71.826747][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   71.830892][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'.
[   71.877098][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'.
[   71.886519][ T6217] ipvlan2: entered promiscuous mode
[   72.051873][ T6229] netlink: 'syz.1.93': attribute type 1 has an invalid length.
[   72.057406][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'.
[   72.077081][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.091851][ T6229] bond1: (slave geneve2): making interface the new active one
[   72.096721][ T6229] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   72.100544][ T5742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.104013][ T5742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.110619][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'.
[   72.116759][ T5742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.119559][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'.
[   72.122980][ T5742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.399121][ T6252] netlink: 'syz.1.101': attribute type 15 has an invalid length.
[   72.409089][ T6252] netlink: 'syz.1.101': attribute type 15 has an invalid length.
[   72.725027][ T6268] vlan2: entered allmulticast mode
[   72.727709][ T6268] bridge0: entered allmulticast mode
[   72.729631][ T6268] bridge3: port 1(vlan2) entered blocking state
[   72.731719][ T6268] bridge3: port 1(vlan2) entered disabled state
[   72.734815][ T6268] vlan2: entered promiscuous mode
[   72.737052][ T6268] bridge0: entered promiscuous mode
[   72.742087][ T6269] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   72.964997][ T6280] vlan2 (unregistering): left promiscuous mode
[   72.968111][ T6280] bridge0 (unregistering): left promiscuous mode
[   72.970424][ T6280] bridge3: port 1(vlan2) entered disabled state
[   73.394028][ T6290] netlink: 'syz.1.112': attribute type 4 has an invalid length.
[   73.400657][ T6292] netlink: 'syz.2.113': attribute type 3 has an invalid length.
[   73.410324][ T6290] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   73.413256][ T6290] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   73.421833][ T6290] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   73.424636][ T6290] netlink: 'syz.1.112': attribute type 2 has an invalid length.
[   73.428963][ T6294] syzkaller1: entered promiscuous mode
[   73.431005][ T6294] syzkaller1: entered allmulticast mode
[   73.446498][ T6294] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   73.504871][ T6299] netlink: 'syz.1.116': attribute type 11 has an invalid length.
[   73.693316][ T6299] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.104456][ T6341] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.124615][ T6341] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   74.158119][ T6342] macvlan2: entered promiscuous mode
[   74.161664][ T6342] macvlan2: entered allmulticast mode
[   74.164141][ T6342] bond2: entered promiscuous mode
[   74.172388][ T6342] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   74.179048][ T6342] bond2: left promiscuous mode
[   74.293286][ T6296] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.301028][ T6296] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   74.315051][ T6360] raw_sendmsg: syz.1.127 forgot to set AF_INET. Fix it!
[   74.347441][ T6296] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   74.349865][ T6296] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   74.383762][ T6296] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   74.388187][ T6296] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   74.813943][ T6389] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.299036][ T6428] warning: `syz.0.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.561819][ T6441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.629207][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.642643][ T6451] bond1: (slave macsec1): Error -34 calling dev_set_mtu
[   75.666036][ T6457] netlink: 'syz.0.150': attribute type 11 has an invalid length.
[   75.701978][ T6462] sctp: [Deprecated]: syz.0.151 (pid 6462) Use of int in maxseg socket option.
[   75.701978][ T6462] Use struct sctp_assoc_value instead
[   75.990149][ T6486] syz_tun: entered promiscuous mode
[   76.232372][ T6499] __nla_validate_parse: 37 callbacks suppressed
[   76.232424][ T6499] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.162'.
[   76.239785][ T6499] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   76.438769][ T6522] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   76.572672][ T6534] netlink: 27 bytes leftover after parsing attributes in process `syz.2.173'.
[   76.576583][ T6536] validate_nla: 6 callbacks suppressed
[   76.576596][ T6536] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   76.587707][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'.
[   76.594617][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.174'.
[   76.603159][ T6539] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   76.751334][ T6554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.755110][ T6554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.760910][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.787966][ T6554] netlink: 64 bytes leftover after parsing attributes in process `syz.2.179'.
[   76.869857][ T6557] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.180'.
[   76.963950][ T6564] netlink: 72 bytes leftover after parsing attributes in process `syz.2.182'.
[   77.057642][ T6569] IPVS: Scheduler module ip_vs_sip not found
[   77.061564][ T6569] IPVS: length: 24 != 14712
[   77.211906][ T6578] lo speed is unknown, defaulting to 1000
[   77.215298][ T6578] lo speed is unknown, defaulting to 1000
[   77.215913][ T6576] netlink: 'syz.2.185': attribute type 10 has an invalid length.
[   77.220949][ T6578] lo speed is unknown, defaulting to 1000
[   77.222120][ T6576] veth0_vlan: left promiscuous mode
[   77.227962][ T6576] veth0_vlan: entered promiscuous mode
[   77.229902][ T6578] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.233055][ T6576] team0: Device veth0_vlan failed to register rx_handler
[   77.248407][ T6578] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   77.304774][ T6578] lo speed is unknown, defaulting to 1000
[   77.327413][ T6578] lo speed is unknown, defaulting to 1000
[   77.333488][ T6578] lo speed is unknown, defaulting to 1000
[   77.370077][ T6579] netlink: 'syz.1.186': attribute type 4 has an invalid length.
[   77.799153][ T6619] xfrm1: entered promiscuous mode
[   77.800828][ T6619] xfrm1: entered allmulticast mode
[   77.869468][ T6628] netlink: 'syz.2.201': attribute type 30 has an invalid length.
[   77.932475][ T6631] netlink: 'syz.1.203': attribute type 16 has an invalid length.
[   77.975064][ T6640] netlink: 'syz.2.204': attribute type 3 has an invalid length.
[   77.986181][ T6640] netlink: 'syz.2.204': attribute type 12 has an invalid length.
[   78.003863][ T6640] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   78.120561][ T6656] netlink: 'syz.2.207': attribute type 5 has an invalid length.
[   78.145690][ T6656] geneve3: entered promiscuous mode
[   78.150968][ T6656] geneve3: entered allmulticast mode
[   78.158474][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   78.163591][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   78.168081][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   78.180634][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   78.334793][ T6675] IPv6: sit2: Disabled Multicast RS
[   78.454969][ T6684] lo speed is unknown, defaulting to 1000
[   78.469568][ T6686] netlink: 'syz.1.217': attribute type 7 has an invalid length.
[   78.633421][ T6704] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   78.883285][ T6720] lo speed is unknown, defaulting to 1000
[   79.127622][ T6738] lo: entered allmulticast mode
[   79.137874][ T6737] dvmrp1: entered allmulticast mode
[   79.147447][ T6736] lo: left allmulticast mode
[   79.278392][ T6746] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[   79.281615][ T6746] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   79.289567][ T6746] bond4: (slave vcan1): making interface the new active one
[   79.293446][ T6746] bond4: (slave vcan1): Enslaving as an active interface with an up link
[   79.326979][ T6746] bond4: (slave vcan2): The slave device specified does not support setting the MAC address
[   79.344246][ T6746] bond4: (slave vcan2): Enslaving as a backup interface with an up link
[   79.352539][ T6749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.368937][ T6746] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.409367][ T6749] syzkaller0: entered promiscuous mode
[   79.411673][ T6749] syzkaller0: entered allmulticast mode
[   79.414569][ T6749] tipc: Resetting bearer <eth:syzkaller0>
[   79.477290][ T6748] tipc: Resetting bearer <eth:syzkaller0>
[   80.460295][   T24] tipc: Node number set to 4128314060
[   80.531255][ T6748] tipc: Disabling bearer <eth:syzkaller0>
[   80.721206][ T6765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.814126][ T6767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   80.835381][ T6769] tipc: Started in network mode
[   80.837725][ T6769] tipc: Node identity a636a0c0e3b7, cluster identity 4711
[   80.840186][ T6769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.852087][ T6768] tipc: Disabling bearer <eth:syzkaller0>
[   80.864059][ T6770] geneve4: entered promiscuous mode
[   80.866068][ T6770] geneve4: entered allmulticast mode
[   80.891299][ T6767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   80.947778][ T6767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   81.073997][ T6772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.101227][ T6767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   81.111161][ T6773] xfrm0: entered promiscuous mode
[   81.125895][ T6773] xfrm0: entered allmulticast mode
[   81.155054][ T6772] lo speed is unknown, defaulting to 1000
[   81.211263][ T5878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   81.241668][ T5878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   81.266216][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   81.276755][ T6772] syz.0.244 (6772) used greatest stack depth: 19840 bytes left
[   81.288642][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   81.367192][ T6777] __nla_validate_parse: 22 callbacks suppressed
[   81.367205][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'.
[   81.520527][   T47] cfg80211: failed to load regulatory.db
[   81.636459][ T6784] lo speed is unknown, defaulting to 1000
[   81.683850][ T6789] veth1_to_hsr: left allmulticast mode
[   81.687358][ T6789] veth1_to_hsr: left promiscuous mode
[   81.690335][ T6789] macvtap1: left promiscuous mode
[   81.691973][ T6789] macvtap1: left allmulticast mode
[   81.694526][ T6789] batadv1: left allmulticast mode
[   81.698775][ T6789] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   81.701116][ T6789] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   81.703504][ T6789] vlan2: left promiscuous mode
[   81.705024][ T6789] bond0: left promiscuous mode
[   81.707232][ T6789] bond_slave_0: left promiscuous mode
[   81.709014][ T6789] bond_slave_1: left promiscuous mode
[   81.710798][ T6789] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   81.713236][ T6789] vlan2: left allmulticast mode
[   81.714994][ T6789] bond0: left allmulticast mode
[   81.717665][ T6789] bond_slave_0: left allmulticast mode
[   81.719660][ T6789] bond_slave_1: left allmulticast mode
[   81.721848][ T6789] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   81.725030][ T6789] ipvlan2: left promiscuous mode
[   81.767306][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.771089][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.781199][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.785817][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.010843][ T6797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.251'.
[   82.374331][ T6801] validate_nla: 5 callbacks suppressed
[   82.374347][ T6801] netlink: 'syz.2.253': attribute type 6 has an invalid length.
[   82.384223][ T6801] netlink: 'syz.2.253': attribute type 12 has an invalid length.
[   82.388816][ T6801] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.253'.
[   82.695166][ T6818] netlink: 140 bytes leftover after parsing attributes in process `syz.2.257'.
[   82.709607][ T6818] netlink: 'syz.2.257': attribute type 5 has an invalid length.
[   82.776802][ T6818] netlink: 'syz.2.257': attribute type 10 has an invalid length.
[   82.787631][ T6818] 8021q: adding VLAN 0 to HW filter on device team0
[   82.869545][ T6835] IPv6: Can't replace route, no match found
[   82.872091][ T6835] IPv6: Can't replace route, no match found
[   82.876610][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'.
[   82.883191][ T6835] netlink: 'syz.1.260': attribute type 5 has an invalid length.
[   82.888941][ T6836] netlink: 'syz.1.260': attribute type 5 has an invalid length.
[   82.898776][ T6835] syzkaller1: entered promiscuous mode
[   82.900604][ T6835] syzkaller1: entered allmulticast mode
[   82.987029][ T6844] netlink: 'syz.2.263': attribute type 14 has an invalid length.
[   83.048821][ T6849] openvswitch: netlink: Flow key attr not present in new flow.
[   83.147487][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'.
[   83.248695][ T6863] netlink: 200 bytes leftover after parsing attributes in process `syz.0.261'.
[   83.260876][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'.
[   83.846118][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   83.898065][ T6877] bridge0: entered promiscuous mode
[   83.900293][ T6877] macsec1: entered promiscuous mode
[   83.903585][ T6877] bridge0: port 3(macsec1) entered blocking state
[   83.907930][ T6877] bridge0: port 3(macsec1) entered disabled state
[   83.910320][ T6877] macsec1: entered allmulticast mode
[   83.912010][ T6877] bridge0: entered allmulticast mode
[   83.914950][ T6877] macsec1: left allmulticast mode
[   83.917426][ T6877] bridge0: left allmulticast mode
[   83.920180][ T6877] bridge0: left promiscuous mode
[   84.002477][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.272'.
[   84.065154][ T6882] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.070990][ T6882] bridge0: port 3(bond2) entered blocking state
[   84.073478][ T6882] bridge0: port 3(bond2) entered disabled state
[   84.077354][ T6882] bond2: entered allmulticast mode
[   84.081142][ T6882] bond2: entered promiscuous mode
[   84.083773][ T6882] bridge0: port 3(bond2) entered blocking state
[   84.086330][ T6882] bridge0: port 3(bond2) entered forwarding state
[   84.138938][ T6889] netlink: 'syz.2.275': attribute type 2 has an invalid length.
[   84.392348][ T6908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   84.418655][ T6908] netlink: 'syz.0.280': attribute type 10 has an invalid length.
[   84.426704][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.430671][ T6908] team0: Port device bond0 added
[   84.467454][ T6910] netlink: 'syz.0.281': attribute type 3 has an invalid length.
[   84.473630][ T6910] syz_tun: entered allmulticast mode
[   84.484561][ T6910] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   84.523784][ T6910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.533734][ T6909] syz_tun: left allmulticast mode
[   84.712722][ T6917] 8021q: VLANs not supported on caif0
[   84.879051][   T40] bridge0: port 3(bond2) entered disabled state
[   85.119018][ T6940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.153090][ T6940] lo speed is unknown, defaulting to 1000
[   85.200860][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.257103][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.257198][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.179042][ T6988] tipc: Started in network mode
[   86.185700][ T6988] tipc: Node identity 080211000001, cluster identity 4711
[   86.188209][ T6988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.194424][ T6988] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   86.199349][ T6988] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   86.213223][ T6988] tipc: Resetting bearer <eth:syzkaller0>
[   86.410232][ T7002] __nla_validate_parse: 12 callbacks suppressed
[   86.410247][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'.
[   86.442790][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'.
[   86.508596][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'.
[   86.547662][ T7012] bridge1: entered allmulticast mode
[   86.558926][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'.
[   86.584762][ T7014] bond6: entered promiscuous mode
[   86.590041][ T7014] 8021q: adding VLAN 0 to HW filter on device bond6
[   86.696769][ T7014] bond6 (unregistering): Released all slaves
[   86.737411][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[   86.747963][ T7028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'.
[   86.826582][ T7035] xfrm0: entered promiscuous mode
[   86.828587][ T7035] xfrm0: entered allmulticast mode
[   86.834568][ T7037] netlink: 164 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.839527][ T7037] netlink: 164 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.842308][ T7037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.852861][ T7035] lo speed is unknown, defaulting to 1000
[   86.910701][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'.
[   87.156130][ T7046] block nbd0: server does not support multiple connections per device.
[   87.161134][ T7046] block nbd0: shutting down sockets
[   87.200923][   T24] tipc: Node number set to 134418688
[   87.364790][ T7063] lo speed is unknown, defaulting to 1000
[   87.411350][ T7065] IPv6: sit2: Disabled Multicast RS
[   87.414542][ T7065] sit2: entered allmulticast mode
[   87.481245][ T7069] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   87.488720][ T7068] validate_nla: 8 callbacks suppressed
[   87.488732][ T7068] netlink: 'syz.2.325': attribute type 1 has an invalid length.
[   87.578298][ T7075] netlink: 'syz.2.326': attribute type 10 has an invalid length.
[   87.582897][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.587633][ T7075] team0: Port device bond0 added
[   88.822226][ T7103] netlink: 'syz.1.334': attribute type 4 has an invalid length.
[   88.832185][ T7103] netlink: 'syz.1.334': attribute type 4 has an invalid length.
[   88.847404][ T1277] lo speed is unknown, defaulting to 1000
[   88.849754][ T1277] syz2: Port: 1 Link ACTIVE
[   89.127605][ T7124] team0: Port device bond0 removed
[   89.136625][ T7124] bridge_slave_0: left allmulticast mode
[   89.144207][ T7124] bridge_slave_0: left promiscuous mode
[   89.147999][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.154979][ T7124] bridge_slave_1: left allmulticast mode
[   89.157870][ T7124] bridge_slave_1: left promiscuous mode
[   89.159882][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.169188][ T7124] bond0: (slave bond_slave_0): Releasing backup interface
[   89.175213][ T7124] bond0: (slave bond_slave_1): Releasing backup interface
[   89.189790][ T7124] team0: Port device team_slave_0 removed
[   89.210304][ T7124] team0: Port device team_slave_1 removed
[   89.213040][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.217243][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.222407][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.226727][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.233224][ T7124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   89.234338][ T7135] netlink: 'syz.0.341': attribute type 10 has an invalid length.
[   89.244477][ T7135] bond0: (slave wlan1): Opening slave failed
[   89.273925][ T1277] syz0: Port: 1 Link DOWN
[   89.282417][ T7124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.285839][ T7124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.743747][ T7159] bridge7: entered allmulticast mode
[   89.977134][ T7124] syz.0.341 (7124) used greatest stack depth: 19608 bytes left
[   90.348709][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.581228][ T7201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.584315][ T7202] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   90.588874][ T7201] syzkaller0: entered promiscuous mode
[   90.591126][ T7201] syzkaller0: entered allmulticast mode
[   90.609961][ T7201] tipc: Resetting bearer <eth:syzkaller0>
[   90.614196][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   90.627276][ T7200] tipc: Disabling bearer <eth:syzkaller0>
[   90.969623][ T7225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.988683][ T7225] tipc: Disabling bearer <eth:syzkaller0>
[   91.058647][ T7241] netlink: 'syz.1.374': attribute type 13 has an invalid length.
[   91.093671][ T7241] lo speed is unknown, defaulting to 1000
[   91.178006][ T7248] netlink: 'syz.2.377': attribute type 11 has an invalid length.
[   91.278515][ T7257] netlink: 'syz.0.378': attribute type 4 has an invalid length.
[   91.291875][ T7257] netlink: 'syz.0.378': attribute type 4 has an invalid length.
[   91.469745][ T7259] __nla_validate_parse: 17 callbacks suppressed
[   91.469761][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[   91.622696][ T7268] netlink: 228 bytes leftover after parsing attributes in process `syz.2.382'.
[   91.629441][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[   91.691467][ T7270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.694943][ T7270] syzkaller0: entered promiscuous mode
[   91.697335][ T7270] syzkaller0: entered allmulticast mode
[   91.719767][ T7270] tipc: Resetting bearer <eth:syzkaller0>
[   91.726713][ T7269] tipc: Resetting bearer <eth:syzkaller0>
[   91.738665][ T7269] tipc: Disabling bearer <eth:syzkaller0>
[   91.874059][ T7275] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'.
[   91.966135][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'.
[   92.082998][ T7283] lo speed is unknown, defaulting to 1000
[   92.116073][ T7290] ieee802154 phy0 wpan0: encryption failed: -22
[   92.126861][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'.
[   92.150952][   T24] IPVS: starting estimator thread 0...
[   92.228925][ T7296] netlink: 52 bytes leftover after parsing attributes in process `syz.2.392'.
[   92.235980][ T7292] IPVS: using max 38 ests per chain, 91200 per kthread
[   92.304030][ T7304] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002
[   92.307853][ T7298] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002
[   92.343360][ T7305] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   92.417302][ T7309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.673062][ T6146] IPVS: starting estimator thread 0...
[   92.679556][ T7318] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   92.699392][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[   92.756079][ T7320] IPVS: using max 38 ests per chain, 91200 per kthread
[   92.957604][ T7332] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   92.966239][ T7332] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   93.010871][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[   93.095913][ T7339] netlink: 'syz.0.405': attribute type 8 has an invalid length.
[   93.099715][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'.
[   93.189117][ T7345] lo speed is unknown, defaulting to 1000
[   93.326937][ T7352] lo speed is unknown, defaulting to 1000
[   93.335855][ T7345] netlink: 'syz.0.407': attribute type 16 has an invalid length.
[   93.339007][ T7345] netlink: 'syz.0.407': attribute type 17 has an invalid length.
[   93.354006][ T7345] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.398667][ T7353] ieee802154 phy0 wpan0: encryption failed: -22
[   93.408604][ T7353] ieee802154 phy0 wpan0: encryption failed: -22
[   93.577881][ T7368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.743657][ T7360] tipc: Disabling bearer <eth:syzkaller0>
[   93.872523][ T7383] bridge_slave_0: default FDB implementation only supports local addresses
[   93.939327][ T7384] lo speed is unknown, defaulting to 1000
[   94.119186][ T7395] bridge0: port 1(erspan0) entered blocking state
[   94.122787][ T7395] bridge0: port 1(erspan0) entered disabled state
[   94.128345][ T7395] erspan0: entered allmulticast mode
[   94.133525][ T7395] erspan0: entered promiscuous mode
[   94.138130][ T7395] bridge0: port 1(erspan0) entered blocking state
[   94.142260][ T7395] bridge0: port 1(erspan0) entered forwarding state
[   94.154361][ T7395] erspan0: left allmulticast mode
[   94.156767][ T7395] erspan0: left promiscuous mode
[   94.159213][ T7395] bridge0: port 1(erspan0) entered disabled state
[   94.379704][ T7409] syz_tun: entered allmulticast mode
[   95.330815][ T7450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.334456][ T7450] syzkaller0: entered promiscuous mode
[   95.337136][ T7450] syzkaller0: entered allmulticast mode
[   95.359491][ T7450] tipc: Resetting bearer <eth:syzkaller0>
[   95.376362][ T7449] tipc: Resetting bearer <eth:syzkaller0>
[   95.446355][ T7449] tipc: Disabling bearer <eth:syzkaller0>
[   95.474836][ T7453] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   95.554806][ T7457] netlink: 'syz.0.438': attribute type 12 has an invalid length.
[   95.662580][ T7459] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   95.852607][ T7459] bond0 (unregistering): Released all slaves
[   96.149447][ T7494] netlink: 'syz.2.450': attribute type 29 has an invalid length.
[   96.340477][ T7500] xfrm0: left promiscuous mode
[   96.342468][ T7500] xfrm0: left allmulticast mode
[   96.410465][ T7500] xfrm1: left promiscuous mode
[   96.412438][ T7500] xfrm1: left allmulticast mode
[   96.423387][ T7500] bridge1: left allmulticast mode
[   96.431462][ T5878] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.435047][ T5878] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.438780][ T5878] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.442084][ T5878] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.491890][ T7504] netlink: 'syz.2.452': attribute type 6 has an invalid length.
[   96.494593][ T7504] __nla_validate_parse: 19 callbacks suppressed
[   96.494606][ T7504] netlink: 176 bytes leftover after parsing attributes in process `syz.2.452'.
[   96.711659][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'.
[   96.766743][ T7526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.770067][ T7527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.058044][ T7541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.152930][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'.
[   97.211289][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'.
[   97.403948][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[   98.133288][ T7566] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547)
[   98.139311][ T7566] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   98.143603][ T7566] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547)
[   98.150766][ T7566] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   98.183124][ T7578] netlink: 22 bytes leftover after parsing attributes in process `syz.0.473'.
[   98.187848][ T7579] netlink: 22 bytes leftover after parsing attributes in process `syz.0.473'.
[   98.303702][ T7584] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[   98.342587][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.348126][ T7581] netlink: 'syz.2.475': attribute type 10 has an invalid length.
[   98.394393][ T7584] bond0: (slave veth5): Enslaving as an active interface with a down link
[   98.414198][ T7593] netlink: 'syz.1.478': attribute type 10 has an invalid length.
[   98.420579][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'.
[   98.424592][ T7584] macvlan3: entered promiscuous mode
[   98.427921][ T7584] macvlan3: entered allmulticast mode
[   98.430824][ T7584] bond0: entered promiscuous mode
[   98.433617][ T7584] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   98.437428][ T7584] bond0: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   98.444804][ T7584] bond0: left promiscuous mode
[   98.463064][ T7593] veth0_vlan: left promiscuous mode
[   98.465054][ T7593] veth0_vlan: entered promiscuous mode
[   98.468669][ T7593] veth0_vlan: entered allmulticast mode
[   98.476701][ T7593] bridge0: port 3(veth0_vlan) entered blocking state
[   98.479340][ T7593] bridge0: port 3(veth0_vlan) entered disabled state
[   98.483759][ T7593] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   98.576189][   T47] IPVS: starting estimator thread 0...
[   98.587611][ T7597] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   98.598222][ T7595] netlink: 72 bytes leftover after parsing attributes in process `syz.1.479'.
[   98.676812][ T7598] IPVS: using max 50 ests per chain, 120000 per kthread
[   98.683373][ T7600] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   98.752869][ T7606] bond0: (slave vlan4): Opening slave failed
[   98.769840][ T7600] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   98.859499][ T7600] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   98.919305][ T7600] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   99.026621][ T5878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   99.030227][ T5878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   99.058725][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   99.063904][ T7625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'.
[   99.081741][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   99.164484][ T7630] netlink: 'syz.0.490': attribute type 4 has an invalid length.
[   99.169828][ T7632] netlink: 'syz.0.490': attribute type 4 has an invalid length.
[   99.169856][ T7631] siw: device registration error -23
[   99.252013][ T7640] netlink: 'syz.1.494': attribute type 6 has an invalid length.
[  100.343479][ T7673] syz_tun (unregistering): left allmulticast mode
[  100.791803][ T5878] bond2: left allmulticast mode
[  100.794118][ T5878] bond2: left promiscuous mode
[  100.799609][ T5878] bridge0: port 3(bond2) entered disabled state
SYZFAIL: repeatedly failed to execute the program
proc=3 req=506 state=1 status=7 (errno 9: Bad file descriptor)
[  101.310068][ T5878] bond1 (unregistering): Released all slaves
[  101.395244][ T5878] bond2 (unregistering): Released all slaves
[  101.484130][ T5878] bond0 (unregistering): (slave veth5): Releasing active interface
[  101.489040][ T5878] bond0 (unregistering): Released all slaves
[  101.573547][ T5878] tipc: Left network mode
[  101.840934][ T5878] hsr_slave_0: left promiscuous mode
[  101.844170][ T5878] hsr_slave_1: left promiscuous mode
[  102.695193][ T5878] IPVS: stop unused estimator thread 0...
[  103.042520][ T5878] bridge_slave_1: left allmulticast mode
[  103.044401][ T5878] bridge_slave_1: left promiscuous mode
[  103.046691][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.050249][ T5878] bridge_slave_0: left allmulticast mode
[  103.052063][ T5878] bridge_slave_0: left promiscuous mode
[  103.055255][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.220887][ T5878] dvmrp1 (unregistering): left allmulticast mode
[  103.232242][ T5878] bond1 (unregistering): (slave geneve2): Releasing active interface
[  103.547661][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.552803][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.558906][ T5878] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  103.563189][ T5878] bond0 (unregistering): Released all slaves
[  103.674183][ T5878] bond1 (unregistering): Released all slaves
[  103.686346][ T5878] bond2 (unregistering): Released all slaves
[  103.698838][ T5878] bond3 (unregistering): Released all slaves
[  103.813230][ T5878] bond4 (unregistering): (slave vcan1): Releasing backup interface
[  103.817638][ T5878] bond4 (unregistering): (slave vcan2): Releasing backup interface
[  103.822819][ T5878] bond4 (unregistering): Released all slaves
[  103.834779][ T5878] bond5 (unregistering): Released all slaves
[  103.962864][ T5878] tipc: Disabling bearer <eth:syzkaller0>
[  103.971046][ T5878] tipc: Left network mode
[  104.138461][ T5878] hsr_slave_0: left promiscuous mode
[  104.142239][ T5878] hsr_slave_1: left promiscuous mode
[  104.145267][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.157571][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.614242][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  104.653392][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  105.110738][ T6146] lo speed is unknown, defaulting to 1000
[  105.113118][ T6146] infiniband syz2: ib_query_port failed (-19)
[  105.383186][ T5878] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
17:45:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=ffff888106e361f8 RCX=36f7fe3d7a102200 RDX=ffff888106e35640
RSI=ffff888106b228d8 RDI=ffff888106e361f8 RBP=00000000ffffffff RSP=ffffc900000074e8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000ea4
R12=0000000000000246 R13=ffff888106e35640 R14=ffff888106b228d8 R15=0000000000000005
RIP=ffffffff8b7bbe13 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5f9c4d1800 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc91382dfc CR3=0000000022d46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000001a RBX=0000000000000009 RCX=0000000000000009 RDX=0000000000000008
RSI=ffff8880211444e8 RDI=ffff888021143980 RBP=0000000000000200 RSP=ffffc900031df3f0
R8 =0000000000000000 R9 =ffffffff822e753a R10=dffffc0000000000 R11=fffff94000901811
R12=0000000000000003 R13=0000000000000001 R14=ffff8880211444e8 R15=ffff888021144508
RIP=ffffffff819d8d9c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558cb11500 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffebb5b8609 CR3=000000002c7bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=83197162aade9b51 d0a0896cf0a7503a
XMM02=134574c9dc1deeaf d0bb2e8c1637cefe XMM03=bb1500bb7030b3df d3e695949e8baa5d
XMM04=48e54edc5ee8dc10 5082c5327d6bd01b XMM05=3bbb1500bb7030b3 dfd3e695949e8baa
XMM06=5d134574c9dc1dee afd0bb2e8c1637ce XMM07=fe83197162aade9b 51d0a0896cf0a750
XMM08=0000000000000000 00007f9976212f0f XMM09=0000000000000000 00007f9976212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
