last executing test programs:

1.287773329s ago: executing program 1 (id=392):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x13, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@getnexthop={0x38, 0x6a, 0x900, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r6}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x13, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@getnexthop={0x38, 0x6a, 0x900, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r6}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async)

1.227813965s ago: executing program 1 (id=395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0xfeff, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.179143972s ago: executing program 2 (id=398):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
setsockopt$inet6_group_source_req(r0, 0x29, 0x4, &(0x7f0000000180)={0x9, {{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0xc}, 0x200}}, {{0xa, 0x4e21, 0x7, @loopback, 0x4}}}, 0x108)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@private2, <r3=>0x0}, &(0x7f0000000300)=0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e21, 0x7, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x16, r3, 0xee01}, {0x5, 0x2, 0x5, 0x741, 0x8, 0x4e9, 0xffffffffffffb7e3, 0x5}, {0xc, 0x3, 0x4}, 0xfff, 0x6e6bbd, 0x2, 0x0, 0x0, 0x2}, {{@in6=@private1, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3503, 0x357e34b0798706ac, 0x2acab9547746581, 0x5, 0x4a3, 0x4, 0x5}}, 0xe8)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000440)={0x7, 'bridge0\x00', {0x37cd}, 0x5})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'sit0\x00', <r5=>r3, 0x7800, 0x7800, 0x8c6a4119, 0x8001, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x65, 0x0, 0x6, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0x27, 0xfc, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0x90, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xd2, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', r3, r0, 0x4, 0x4, 0x2}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x14, 0x24, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@call={0x85, 0x0, 0x0, 0x83}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6b31}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0xd8, 0xd, 0x5, 0xf, 0x7fff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xc, 0x9, 0xb, 0x1, 0x8}, @generic={0x39, 0x8, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x1, 0x2, 0x0, 0x3, 0xb, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x6f, &(0x7f00000006c0)=""/111, 0x40f00, 0x4, '\x00', r5, @lirc_mode2=0x10, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x0, 0x10001, 0x698cd3dc}, 0x10, r6, r0, 0x7, &(0x7f0000000bc0)=[r0, 0x1, r0, r0, r0, r7], &(0x7f0000000c00)=[{0x5, 0x4, 0x9, 0x4}, {0x2, 0x5, 0x8, 0x4}, {0x3, 0x2, 0x6, 0x4}, {0x4, 0x1, 0x9, 0x5}, {0x5, 0x3, 0xe, 0x1}, {0x0, 0x3, 0x0, 0x5}, {0x5, 0x5, 0xf, 0x8}], 0x10, 0x47885de0}, 0x94)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000d40))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000d80)={'wg1\x00', <r9=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000dc0)={@private2={0xfc, 0x2, '\x00', 0x1}, r9}, 0x14)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x111800, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000e40)={'lo\x00', @local})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0x6c, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xde, 0x8, 0x8, &(0x7f0000001040)}}, 0x10)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000011c0)={0x0, 0x10000}, &(0x7f0000001200)=0x8)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x94480004}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x10c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1a}}]}, @CTA_STATUS={0x8}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x81, 0xff}}]}}, @CTA_NAT_DST={0x30, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0x24, 0x17, [0x3, 0x2, 0x4, 0xffff, 0x0, 0x6, 0xb4d, 0xffff7560]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x848}, 0x88c4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001440)=r8, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x12}, @var={0x2, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61, 0x30, 0x5f, 0x5f, 0x26, 0x0, 0x0]}}, &(0x7f0000001500)=""/45, 0x4d, 0x2d, 0x0, 0x3, 0x10000, @value=r0}, 0x28)
writev(r10, &(0x7f0000001780)=[{&(0x7f0000001580)="62bd3e5af5581623e4fb551f27ea5aec0e046054cde26bb1f0f8d7a6f1d69c5a7f1a22732a4fbf1a5a6e7bd32a9985ccfcf90ad2008fe18c35f6135bd5c72c7ecafa0f292ec21d5b4f18b5b3456028214cc70d9cb06a5bd47f754fe8725c86ccd5ef769fed9113dba3844e25277c75825a833dcbcfee41c1acd8b5ccd80f48a88c67518e85ae462380e90560cf188163d295f15d9ba4866ec97bb6568b530ac16fc33347d53ffe9c196dd35dd7a53e2c8110550a2d3d5f5cb75900cf867dc00dd4810155522a617e5f039e67", 0xcc}, {&(0x7f0000001680)="a66514937b142b8a550a23a90161999f73448ee0d1dfe6642a0c45d445cfe5974207f6019841b5bf567ecc686aec53126f40744fc12a298857786bedbb08b606d322e7ecfc814c77f4ea5354bab1f89b9ccc3b90f508c14d5cfe0b1a4a305062ed6726a233d237cac9c6c2a614cb030061924001e9aba6718582762c9e714deef59c01b6ba2740df5d309f6f9366b5fbf1b5cacb4979f57e379432906e7d43373d41175b6955ea8d285354e5e1182387195a4416b09b019452592f099d3005311d3f45ae8826ed3776ddf7fe0d5edecc7ca5bfdd92ae488b8739cdece93a82e2ed05ce360e115d276908", 0xea}], 0x2)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wpan4\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r11, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x40, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008080)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20f016}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000004)

1.123026235s ago: executing program 2 (id=400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc010000190001000000000006000000fe88000000000000fe8000000000000000000000000000aa00020000000000000a00008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.119557679s ago: executing program 1 (id=402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x2000, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.010275548s ago: executing program 2 (id=405):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xb}, {0xffff, 0xffff}, {0x2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xb}, {0xffff, 0xffff}, {0x2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a30000000000900010073797a300000000008000a4004"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0xffffff80, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000012000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440)
recvmmsg$unix(r6, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000200)=""/4069, 0xffa}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000040)=""/22, 0x16}], 0x3}}], 0x554, 0x40000040, 0x0) (async)
recvmmsg$unix(r6, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000200)=""/4069, 0xffa}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000040)=""/22, 0x16}], 0x3}}], 0x554, 0x40000040, 0x0)

1.009751354s ago: executing program 1 (id=406):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x8, 0x2, 0xa000, 0x3}, 0x10)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20040000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\b\x00\t\x00&I'], 0x24}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1fc, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb471, @mcast2, 0x4f}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "21f2d68771b809b6088e9108bf807914b525dff6ff67a5223d91a0152f7f15"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "18157056914a0528b64c8b3d412f2f8552a52937610ab28c0977d5d90db8e0e8"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d1d8488ec996a432898e2b107e1c88bcf5fba77ce39"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x525000, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

937.540202ms ago: executing program 2 (id=407):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x5, 0x4) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x5, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x7)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x4)
recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000200)=""/63, 0x3f}], 0x3, &(0x7f0000000280)=""/74, 0x4a}, 0x5}, {{&(0x7f0000000300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/35, 0x23}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/236, 0xec}], 0x3, &(0x7f00000005c0)=""/50, 0x32}, 0xa8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000006c0)=""/170, 0xaa}], 0x2, &(0x7f00000007c0)=""/106, 0x6a}, 0x100}], 0x3, 0x0, &(0x7f0000000900))
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000980)={0x10000000})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000009c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004085}, 0x4000080) (async)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004085}, 0x4000080)
write$cgroup_type(r3, &(0x7f0000000b80), 0x9)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000bc0)) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000bc0))
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x40000) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x40000)
sendto$l2tp6(r2, &(0x7f0000000dc0)="404597061d78bbaaafe58f3f2c053028398a2855b6421cb8b13e7138e3f1b2e2a4dac4812a1ff3882b315d1a71a951659bca3f4d4fb1d87fb245f5a1d25fe1f6ae7f0a5715341eb3645aba37f65eb955221e7e2bc85b041e0d684815890f1a1ff5595307404439fd0c532b5ebcb65b5e49946027c7005ef99356e681d2ca0c8cfc301fb0d5bb58a0e59680bf2495a742a587ad78fcb8a723a6dfb0b7cb60a8bce6565493f171bf99f52ec42d6a2fe26181a7", 0xb2, 0x8010, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001180)={0xffffffff}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001180)={0xffffffff, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0x17, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0xc, 0x8, 0x6, 0xfffffffffffffffe, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ldst={0x1, 0x1, 0x5, 0x1, 0x8, 0xffffffffffffffff, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='syzkaller\x00', 0x7, 0x49, &(0x7f0000001080)=""/73, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x36, r3, 0x8, &(0x7f0000001100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x4, 0xa, 0x0, 0x6}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)=[r3], 0x0, 0x10, 0x400}, 0x94)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000012c0)={<r8=>0x0}, &(0x7f0000001300)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001340)={<r9=>r8, 0x9, 0x20}, &(0x7f0000001380)=0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000001900)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x16}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_USERDATA={0x18, 0xc, "4272d2754c471f14fdd30b24322e594e0ad14f3c"}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x210, 0xb, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x5}, [@NFTA_SET_DESC={0x6c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff7ff}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x158, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x51}, @NFTA_SET_DESC_CONCAT={0xd4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x966}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbbd9}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x90}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x488}}, 0x4000000)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001940)={0xfff8, 0x7fff, 0x8, 0x3, 0x4, 0xc, 0x4, 0x9, r9}, 0x20)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x58, 0xd, 0x6, 0x801, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4084) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x58, 0xd, 0x6, 0x801, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4084)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001ac0)={r4}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001ac0)={<r10=>r4})
socket$key(0xf, 0x3, 0x2)
getsockname$packet(r10, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b40)=0x14)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000001b80)={0x1, 0x5}, 0x8) (async)
setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000001b80)={0x1, 0x5}, 0x8)

887.597496ms ago: executing program 2 (id=409):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x80800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010000000c0001000300000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x40040)

720.308722ms ago: executing program 0 (id=412):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x2700, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

546.979933ms ago: executing program 0 (id=413):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4eea52b7d"], 0xfe33)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x28, 0x100, 0x70bd27, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000051)

468.495392ms ago: executing program 0 (id=414):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab8000000060a0500000000000000000002000000080009400000000108000940000000030900020073797a31000000000900010073797a30000000000c00064000000000000000010800094000000001080009400000000108000140000000034c00058008000140000000350800014000008864080001400000000108000240000000000800014000"], 0xe0}}, 0x0) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4, 0x8}]}, 0x10) (async)
syz_emit_ethernet(0x22, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x5, 0x14, 0x68, 0x0, 0x6, 0x21, 0x0, @broadcast, @private=0xa010100}}}}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x800)

369.20226ms ago: executing program 0 (id=415):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x24060400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_type(r8, &(0x7f0000000040), 0x2, 0x0)
sendfile(r7, r9, &(0x7f0000000240)=0x6, 0x9)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000e, 0x28011, r10, 0x1a293000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

138.639815ms ago: executing program 0 (id=416):
syz_emit_ethernet(0x72, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "a83fda", 0x3c, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty, [], "a6a8eb0c7eec07d28d8b29c5"}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0205fe0d0c00000000000000feffffff05000600ff0000000a004e23000000030000000000000000000000000000000107000000000083000200010020000000e5b5d6f900000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x4000000)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
close(r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)

49.39666ms ago: executing program 0 (id=417):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="080007000200000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d0000000007000f000000080007000000c0ff080007000004000008000100", @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000280), 0x10)
sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000009a3c5514"], 0x48}}, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "38d99b8156a98263"}}, 0x48}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x40000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex, 0xffffffffffffffff, 0x13, 0x8}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x7}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

45.934525ms ago: executing program 1 (id=418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8810}, 0x8050) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1ff}]}}}]}, 0x3c}}, 0x80) (async)
socket$unix(0x1, 0x2, 0x0)

45.676132ms ago: executing program 2 (id=419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x12, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

0s ago: executing program 1 (id=420):
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01762dbd7000fcdbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000500740003000000080014"], 0x40}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0a001c008e9381064e81f7a2db44b9b545c7910006007c09", 0x18}], 0x1}, 0x40008c4)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000580)={'lo\x00', 0x200})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r7})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
socket$vsock_stream(0x28, 0x1, 0x0)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="654ac0ff00100000950000cab42d321981c0660000000000"], &(0x7f0000000040)='GPL\x00', 0x6a, 0x35, &(0x7f0000000080)=""/53, 0x40f00, 0x3d, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x7, 0x101, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000129bd7000fddbdf252100000008000300", @ANYRES32=r14, @ANYBLOB="922b33ebe8d0f1ca7a025e1af40000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x426}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x70, &(0x7f0000000340)=""/112, 0x41000, 0x41, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0xffffffff, 0xa, 0x8}, {0x2, 0x2, 0x10, 0x4}], 0x10, 0x101}, 0x94)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6000000010000d04000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c000280080001000800000024002b80080003000100000008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="72e92964e6f0e88b493096698f97a8d3eead8977d7caf0f76f4ca23fbf4eac0d0cb42c82af9ce393161b3f2bc6bbe273974f771c559dc3bc0858fb565fa308153652443d310c1e12894aaee4605a61fc6a82de3306cabfe3244b3270f260168d831bac2b8521048f01b1b207ede88bf5bd0fd70f3dfae9b61ec46218e24393c4d0db998a7d64de1da1a757035c405fbe8f04e54331569f72"], 0x60}}, 0x8000)
r16 = socket(0x1, 0x4, 0x9)
syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0)
setsockopt$inet6_buf(r16, 0x29, 0xd3, &(0x7f0000000700)="d6591d38c7da69d84829cd008ac46fb7c2407326e1cbf804dac27daebffa3f0257a6ae365eca5481d39befc2f263358b6d518077d34202a6b429bb542d822bd3ac9087ad20efec7c1a107aa2dcbeff34bf39a6038fada1887c105827464e397a32651654bbabb14c561ab17a10eef8d7dd80eaaef289964b361a95ef2a7fdeec192eba05d2986aa1a3b373c56ea595ee761846a4d3dcb758200cb379124b1eda9da12ce679d3f3c3ccecf80121ad42ba390d8e431bc2131e4d3fef2bfefbf36eb60e3cc534d6f64659270ea5199c62545efe66e9812d1ac688a5", 0xda)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15016' (ED25519) to the list of known hosts.
syzkaller login: [   48.457724][ T5819] cgroup: Unknown subsys name 'net'
[   48.675071][ T5819] cgroup: Unknown subsys name 'cpuset'
[   48.680464][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.624847][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.582546][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.591325][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.594966][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.597398][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.597638][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.602545][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.605739][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.607924][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.608387][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.611074][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.643213][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.645906][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.648447][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.651819][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.654519][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.824769][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.929300][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.932439][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.934758][ T5827] bridge_slave_0: entered allmulticast mode
[   54.937446][ T5827] bridge_slave_0: entered promiscuous mode
[   54.944930][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.953648][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.955853][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.958113][ T5827] bridge_slave_1: entered allmulticast mode
[   54.961049][ T5827] bridge_slave_1: entered promiscuous mode
[   54.997751][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.006837][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.009679][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   55.077431][ T5827] team0: Port device team_slave_0 added
[   55.084660][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.086951][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.089106][ T5828] bridge_slave_0: entered allmulticast mode
[   55.092643][ T5828] bridge_slave_0: entered promiscuous mode
[   55.096429][ T5827] team0: Port device team_slave_1 added
[   55.119119][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.121539][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.123740][ T5828] bridge_slave_1: entered allmulticast mode
[   55.126441][ T5828] bridge_slave_1: entered promiscuous mode
[   55.145140][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.147324][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.149493][ T5837] bridge_slave_0: entered allmulticast mode
[   55.152710][ T5837] bridge_slave_0: entered promiscuous mode
[   55.164966][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.167231][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.175903][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.180014][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.182711][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.184857][ T5837] bridge_slave_1: entered allmulticast mode
[   55.188602][ T5837] bridge_slave_1: entered promiscuous mode
[   55.208303][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.210385][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.219382][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.233901][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.238047][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.247633][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.252679][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.299496][ T5828] team0: Port device team_slave_0 added
[   55.305328][ T5828] team0: Port device team_slave_1 added
[   55.316792][ T5837] team0: Port device team_slave_0 added
[   55.339497][ T5827] hsr_slave_0: entered promiscuous mode
[   55.343476][ T5827] hsr_slave_1: entered promiscuous mode
[   55.347075][ T5837] team0: Port device team_slave_1 added
[   55.349368][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.351732][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.359137][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.363973][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.366002][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.373147][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.410472][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.412682][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.420200][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.441308][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.443387][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.450932][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.468207][ T5828] hsr_slave_0: entered promiscuous mode
[   55.470428][ T5828] hsr_slave_1: entered promiscuous mode
[   55.476811][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.479775][ T5828] Cannot create hsr debugfs directory
[   55.518287][ T5837] hsr_slave_0: entered promiscuous mode
[   55.520545][ T5837] hsr_slave_1: entered promiscuous mode
[   55.522653][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.524907][ T5837] Cannot create hsr debugfs directory
[   55.715562][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.734988][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.745023][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.755664][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.766641][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.771763][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.776528][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.793889][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.851104][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.873636][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.877970][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.894019][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.915344][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.929734][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   55.940414][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.942755][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.955818][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.958019][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.972682][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.004117][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.017165][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.034034][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.036279][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.040228][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.042448][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.097528][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.118319][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.124260][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.137778][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.139989][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.154881][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.157083][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.185467][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.188542][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.239020][ T5837] veth0_vlan: entered promiscuous mode
[   56.265387][ T5837] veth1_vlan: entered promiscuous mode
[   56.272854][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.301029][ T5837] veth0_macvtap: entered promiscuous mode
[   56.306516][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.313352][ T5837] veth1_macvtap: entered promiscuous mode
[   56.334499][ T5827] veth0_vlan: entered promiscuous mode
[   56.337594][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.347004][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.362031][ T5827] veth1_vlan: entered promiscuous mode
[   56.365648][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.368295][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.372055][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.374627][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.393524][ T5828] veth0_vlan: entered promiscuous mode
[   56.405999][ T5828] veth1_vlan: entered promiscuous mode
[   56.427746][ T5827] veth0_macvtap: entered promiscuous mode
[   56.442402][ T5827] veth1_macvtap: entered promiscuous mode
[   56.458415][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.465145][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.485834][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.496523][ T5828] veth0_macvtap: entered promiscuous mode
[   56.499884][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.503993][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.505557][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.507966][ T5828] veth1_macvtap: entered promiscuous mode
[   56.517602][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.520277][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.527192][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.529895][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.548743][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.549658][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.567032][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.590143][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.593627][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.596267][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.598807][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.621066][ T5893] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   56.669354][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.673392][ T5836] Bluetooth: hci2: command tx timeout
[   56.673396][ T5830] Bluetooth: hci0: command tx timeout
[   56.673592][ T5830] Bluetooth: hci1: command tx timeout
[   56.684344][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.705627][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.710823][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.731219][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.733591][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.755513][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.757902][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.916782][ T5899] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.924053][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.926625][ T5899] bridge_slave_1: left allmulticast mode
[   56.928416][ T5899] bridge_slave_1: left promiscuous mode
[   56.931615][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.937076][ T5899] bridge_slave_0: left allmulticast mode
[   56.938932][ T5899] bridge_slave_0: left promiscuous mode
[   56.942956][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.182671][ T5908] pim6reg1: entered promiscuous mode
[   58.184355][ T5908] pim6reg1: entered allmulticast mode
[   58.278934][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.497544][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   58.507480][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   58.510490][ T5921] netlink: 'syz.1.9': attribute type 18 has an invalid length.
[   58.590131][ T5926] Zero length message leads to an empty skb
[   58.739694][ T5930] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.751450][ T5830] Bluetooth: hci1: command tx timeout
[   58.760758][ T5830] Bluetooth: hci2: command tx timeout
[   58.762546][ T5830] Bluetooth: hci0: command tx timeout
[   58.859037][ T5936] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13'.
[   58.925625][ T5938] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   58.946303][ T5940] pim6reg1: entered promiscuous mode
[   58.948385][ T5940] pim6reg1: entered allmulticast mode
[   59.059699][ T5943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15'.
[   59.555929][  T791] cfg80211: failed to load regulatory.db
[   59.583825][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.049560][ T5970] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   60.085605][ T5972] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   60.088042][ T5973] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   60.181081][ T5977] netlink: zone id is out of range
[   60.183353][ T5977] netlink: zone id is out of range
[   60.185543][ T5977] netlink: zone id is out of range
[   60.197902][ T5977] netlink: zone id is out of range
[   60.199616][ T5977] netlink: zone id is out of range
[   60.204188][ T5977] netlink: zone id is out of range
[   60.205761][ T5977] netlink: zone id is out of range
[   60.207259][ T5977] netlink: zone id is out of range
[   60.208733][ T5977] netlink: zone id is out of range
[   60.255367][ T5982] pim6reg1: entered promiscuous mode
[   60.257048][ T5982] pim6reg1: entered allmulticast mode
[   60.383773][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29'.
[   60.707261][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.709921][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   60.787937][ T6029] pim6reg1: entered promiscuous mode
[   60.789612][ T6029] pim6reg1: entered allmulticast mode
[   60.841531][ T5219] Bluetooth: hci0: command tx timeout
[   60.843201][ T5830] Bluetooth: hci2: command tx timeout
[   60.843240][ T5836] Bluetooth: hci1: command tx timeout
[   60.995023][ T6047] netlink: 'syz.0.47': attribute type 29 has an invalid length.
[   61.156398][ T6063] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   61.191825][ T6065] netlink: 'syz.1.54': attribute type 9 has an invalid length.
[   61.194451][ T6065] netlink: 'syz.1.54': attribute type 9 has an invalid length.
[   61.227000][ T6067] pim6reg1: entered promiscuous mode
[   61.228666][ T6067] pim6reg1: entered allmulticast mode
[   61.792989][ T6105] syzkaller0: entered promiscuous mode
[   61.794810][ T6105] syzkaller0: entered allmulticast mode
[   61.966463][ T6110] pim6reg1: entered promiscuous mode
[   61.968214][ T6110] pim6reg1: entered allmulticast mode
[   62.135226][ T6112] __nla_validate_parse: 8 callbacks suppressed
[   62.135250][ T6112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.66'.
[   62.396463][ T6114] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   62.576224][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'.
[   62.649279][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.757841][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.819562][ T6135] netlink: 136 bytes leftover after parsing attributes in process `syz.1.71'.
[   62.911423][ T5836] Bluetooth: hci1: command tx timeout
[   62.921896][ T5836] Bluetooth: hci0: command tx timeout
[   62.921916][ T5219] Bluetooth: hci2: command tx timeout
[   63.007082][ T6144] pim6reg1: entered promiscuous mode
[   63.008763][ T6144] pim6reg1: entered allmulticast mode
[   63.052388][ T6146] netlink: 87 bytes leftover after parsing attributes in process `syz.0.74'.
[   63.142759][ T6147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.73'.
[   63.574248][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[   63.665283][ T6162] hsr_slave_1 (unregistering): left promiscuous mode
[   63.881632][ T6168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.81'.
[   64.198580][ T6190] netlink: 104 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.263048][ T6192] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   64.274142][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'.
[   64.274258][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   64.288249][ T6195] veth3: entered allmulticast mode
[   64.294127][ T6193] netlink: 'syz.1.90': attribute type 10 has an invalid length.
[   64.294141][ T6192] netlink: 'syz.1.90': attribute type 10 has an invalid length.
[   64.296540][ T6193] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   64.303469][ T6193] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.577284][ T6219] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   64.577430][ T5841] bond0: (slave bond_slave_0): interface is now down
[   64.594166][ T5841] bond0: (slave bond_slave_1): interface is now down
[   64.621448][ T5841] bond0: (slave bond_slave_0): interface is now down
[   64.623657][ T5841] bond0: (slave bond_slave_1): interface is now down
[   64.634059][ T6222] Cannot find add_set index 2 as target
[   64.641056][ T5841] bond0: (slave bond_slave_0): interface is now down
[   64.643692][ T6222] Cannot find set identified by id 0 to match
[   64.643996][ T5841] bond0: (slave bond_slave_1): interface is now down
[   64.657753][ T5841] bond0: now running without any active interface!
[   65.040273][ T6255] netlink: 'syz.1.106': attribute type 4 has an invalid length.
[   65.108525][ T6262] netlink: 'syz.1.109': attribute type 12 has an invalid length.
[   65.125844][ T6263] netlink: 'syz.1.109': attribute type 29 has an invalid length.
[   65.134101][ T6264] netlink: 'syz.1.109': attribute type 29 has an invalid length.
[   65.342654][ T6279] netlink: 'syz.2.114': attribute type 2 has an invalid length.
[   65.352380][ T6279] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   65.420884][ T6283] syzkaller1: entered allmulticast mode
[   65.488081][ T6287] pim6reg1: entered promiscuous mode
[   65.494297][ T6287] pim6reg1: entered allmulticast mode
[   65.687674][ T6290] veth3: entered allmulticast mode
[   65.692058][ T6290] net_ratelimit: 97 callbacks suppressed
[   65.692067][ T6290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.004636][ T6314] syzkaller0: entered promiscuous mode
[   66.006890][ T6314] syzkaller0: entered allmulticast mode
[   66.063158][   T33] audit: type=1107 audit(1753697690.831:2): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   66.446058][ T6333] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[   66.965691][ T6344] pim6reg1: entered promiscuous mode
[   66.967522][ T6344] pim6reg1: entered allmulticast mode
[   66.980041][   T33] audit: type=1800 audit(1753697691.741:3): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=241 res=0 errno=0
[   67.103487][ T6349] netlink: 'syz.0.133': attribute type 16 has an invalid length.
[   67.113202][ T6349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.449899][ T6364] __nla_validate_parse: 16 callbacks suppressed
[   67.449909][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[   67.583300][ T6371] macvlan0: entered allmulticast mode
[   67.585153][ T6371] veth1_vlan: entered allmulticast mode
[   67.835975][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   67.873027][ T6391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.144'.
[   67.897361][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   68.062475][ T6414] netlink: 104 bytes leftover after parsing attributes in process `syz.0.148'.
[   68.271865][ T6459] veth0_vlan: left promiscuous mode
[   68.275152][ T6459] veth0_vlan: entered promiscuous mode
[   68.279510][ T6459] team0: Device veth0_vlan failed to register rx_handler
[   68.446887][ T6459] syz.0.150 (6459) used greatest stack depth: 19352 bytes left
[   68.496925][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   68.607265][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[   68.610091][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[   69.137299][ T6524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.162'.
[   69.149863][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.161'.
[   69.319893][ T6533] @: renamed from veth0_vlan (while UP)
[   69.333715][ T6534] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   69.381541][ T6540] !: renamed from dummy0 (while UP)
[   69.385788][ T6538] syzkaller1: entered allmulticast mode
[   70.147641][ T6566] @: renamed from veth0_vlan (while UP)
[   70.666072][ T6579] ip6erspan0: entered allmulticast mode
[   70.788231][ T6585] validate_nla: 8 callbacks suppressed
[   70.788256][ T6585] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   70.808572][ T6585] netlink: 'syz.2.182': attribute type 7 has an invalid length.
[   70.834108][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.837638][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.944250][ T6587] syzkaller0: entered promiscuous mode
[   70.946002][ T6587] syzkaller0: entered allmulticast mode
[   70.960643][ T6587] warning: `syz.1.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.652939][ T6600] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   71.657711][ T6600] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   71.712834][ T6602] bond_slave_0: entered promiscuous mode
[   71.714787][ T6602] bond_slave_1: entered promiscuous mode
[   71.717037][ T6602] macvtap1: entered promiscuous mode
[   71.718740][ T6602] bond0: entered promiscuous mode
[   71.722533][ T6602] macvtap1: entered allmulticast mode
[   71.724240][ T6602] bond0: entered allmulticast mode
[   71.725840][ T6602] bond_slave_0: entered allmulticast mode
[   71.728574][ T6602] bond_slave_1: entered allmulticast mode
[   71.738895][ T6602] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   71.746306][ T6602] bond0: left allmulticast mode
[   71.747861][ T6602] bond_slave_0: left allmulticast mode
[   71.749557][ T6602] bond_slave_1: left allmulticast mode
[   71.751736][ T6602] bond0: left promiscuous mode
[   71.753602][ T6602] bond_slave_0: left promiscuous mode
[   71.755335][ T6602] bond_slave_1: left promiscuous mode
[   71.775437][ T6607] netlink: 'syz.1.190': attribute type 14 has an invalid length.
[   71.804335][ T6610] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   71.875496][ T6610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.138612][ T6636] pim6reg0: tun_chr_ioctl cmd 1074025694
[   72.143719][ T6636] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   72.256705][ T6648] pim6reg1: entered promiscuous mode
[   72.258565][ T6648] pim6reg1: entered allmulticast mode
[   72.335326][ T6652] tipc: Started in network mode
[   72.336946][ T6652] tipc: Node identity 92d2a6153cbd, cluster identity 4711
[   72.344615][ T6652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.410435][ T6651] tipc: Disabling bearer <eth:syzkaller0>
[   72.489195][ T6670] __nla_validate_parse: 19 callbacks suppressed
[   72.489206][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.209'.
[   72.539762][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.209'.
[   72.552012][ T6676] netlink: 'syz.2.210': attribute type 10 has an invalid length.
[   72.554519][ T6676] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   72.582666][ T6676] bond0: (slave bond_slave_0): Releasing backup interface
[   72.593448][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'.
[   72.596744][ T6676] bond0: (slave bond_slave_1): Releasing backup interface
[   72.609927][ T6676] team0: Port device team_slave_0 removed
[   72.616699][ T6676] team0: Port device team_slave_1 removed
[   72.618898][ T6676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.623889][ T6676] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.627795][ T6676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.630111][ T6676] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.654370][ T6680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.212'.
[   72.697808][ T6688] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.718080][ T6689] netlink: 104 bytes leftover after parsing attributes in process `syz.0.214'.
[   72.733259][ T6691] IPv6: syztnl1: Disabled Multicast RS
[   72.735875][ T6688] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   72.738288][ T6688] netlink: 228 bytes leftover after parsing attributes in process `syz.2.215'.
[   72.858006][ T6702] TCP: TCP_TX_DELAY enabled
[   72.885052][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   72.957597][ T6713] netlink: 3260 bytes leftover after parsing attributes in process `syz.0.221'.
[   72.960384][ T6713] openvswitch: netlink: Flow key attr not present in new flow.
[   72.996491][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'.
[   73.001586][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[   73.401687][ T6733] syzkaller1: entered promiscuous mode
[   73.403493][ T6733] syzkaller1: entered allmulticast mode
[   73.561164][ T6744] x_tables: duplicate underflow at hook 1
[   73.889926][ T6769] Bluetooth: MGMT ver 1.23
[   73.923697][ T6773] netlink: 'syz.1.242': attribute type 12 has an invalid length.
[   74.209970][ T6795] netlink: 'syz.1.252': attribute type 29 has an invalid length.
[   74.342646][ T6815] pim6reg1: entered promiscuous mode
[   74.348257][ T6815] pim6reg1: entered allmulticast mode
[   74.562976][ T6827] netlink: 'syz.2.262': attribute type 30 has an invalid length.
[   74.566204][ T6827] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   74.579974][ T6827] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.596579][ T6827] bond1: (slave geneve2): making interface the new active one
[   74.599786][ T6827] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   74.615228][ T6827] bond1: entered promiscuous mode
[   74.616847][ T6827] geneve2: entered promiscuous mode
[   74.778027][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.327528][ T6888] unknown channel width for channel at 909000KHz?
[   75.329685][ T6888] unknown channel width for channel at 909000KHz?
[   75.386644][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.389804][ T6896] team0: Device bond0 failed to register rx_handler
[   75.455992][ T6902] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.487456][ T6900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.099615][ T6961] x_tables: duplicate underflow at hook 2
[   76.150148][ T6959] pim6reg1: entered promiscuous mode
[   76.156687][ T6959] pim6reg1: entered allmulticast mode
[   76.199070][ T6944] validate_nla: 7 callbacks suppressed
[   76.199080][ T6944] netlink: 'syz.2.296': attribute type 13 has an invalid length.
[   76.205460][ T6944] netlink: 'syz.2.296': attribute type 17 has an invalid length.
[   76.216203][ T6944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   76.274077][ T6968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.807666][ T6997] veth1_vlan: left allmulticast mode
[   76.876422][ T7005] netlink: 'syz.0.307': attribute type 10 has an invalid length.
[   76.894684][ T6997] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.897580][ T6997] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.900468][ T6997] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.904867][ T6997] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.954782][ T7005] bond0: (slave wlan1): Enslaving as an active interface with a down link
[   76.960404][ T7006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   76.971633][ T7006] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   77.624898][ T7008] __nla_validate_parse: 30 callbacks suppressed
[   77.624909][ T7008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.308'.
[   77.884394][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'.
[   77.905445][ T7017] macvlan1: entered promiscuous mode
[   77.907958][ T7017] ipvlan0: entered promiscuous mode
[   77.910177][ T7017] ipvlan0: left promiscuous mode
[   77.956468][ T7017] macvlan1: left promiscuous mode
[   77.988400][ T7021] pim6reg1: entered promiscuous mode
[   77.990190][ T7021] pim6reg1: entered allmulticast mode
[   78.100130][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'.
[   78.158442][ T7032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.314'.
[   78.215719][ T7032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.237981][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   78.245835][ T7037] bridge0: entered promiscuous mode
[   78.247069][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.316'.
[   78.247652][ T7037] macvtap1: entered promiscuous mode
[   78.255184][ T7037] macvtap1: entered allmulticast mode
[   78.256901][ T7037] bridge0: entered allmulticast mode
[   78.275073][ T7037] bridge0: left allmulticast mode
[   78.276725][ T7037] bridge0: left promiscuous mode
[   78.353331][ T7053] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   78.369065][ T7053] bond2: entered promiscuous mode
[   78.370999][ T7053] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.373815][ T7052] netlink: 3 bytes leftover after parsing attributes in process `syz.0.320'.
[   78.379924][ T7052] batadv1: entered promiscuous mode
[   78.432807][ T7052] batadv1: entered allmulticast mode
[   78.445983][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv1
[   78.449505][ T7052] bond2: (slave batadv1): making interface the new active one
[   78.458611][ T7052] bond2: (slave batadv1): Enslaving as an active interface with an up link
[   78.574964][ T7052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.320'.
[   78.583252][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.319'.
[   78.658535][ T7066] netlink: 44 bytes leftover after parsing attributes in process `syz.0.323'.
[   78.753625][ T7068] pim6reg1: entered promiscuous mode
[   78.755459][ T7068] pim6reg1: entered allmulticast mode
[   78.814786][ T7073] lo speed is unknown, defaulting to 1000
[   78.826443][ T7073] lo speed is unknown, defaulting to 1000
[   78.829910][ T7073] lo speed is unknown, defaulting to 1000
[   78.836214][ T7073] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.856935][ T7073] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   78.885525][ T7075] ipvlan5: entered promiscuous mode
[   78.908986][ T7078] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   78.910780][ T7073] lo speed is unknown, defaulting to 1000
[   78.916661][ T7073] lo speed is unknown, defaulting to 1000
[   78.919374][ T7075] Driver unsupported XDP return value 0 on prog  (id 137) dev N/A, expect packet loss!
[   78.925111][ T7073] lo speed is unknown, defaulting to 1000
[   79.045581][ T7088] netlink: 'syz.2.329': attribute type 10 has an invalid length.
[   79.052450][ T7088] team0: Port device 0! added
[   79.875403][ T7102] vlan2: entered promiscuous mode
[   79.877067][ T7102] bridge0: entered promiscuous mode
[   79.955887][ T7109] _Z`Ԁ@: entered promiscuous mode
[   79.958358][ T7111] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   80.117603][ T7130] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   80.129219][ T7130] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   80.164834][ T7130] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.204127][ T7133] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[   80.624003][ T7172] erspan0: entered allmulticast mode
[   80.660249][ T7171] netlink: 'syz.0.358': attribute type 11 has an invalid length.
[   80.767778][ T7185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.852885][ T7191] pim6reg1: entered promiscuous mode
[   80.854560][ T7191] pim6reg1: entered allmulticast mode
[   81.033774][ T7210] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[   81.052150][ T7210] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.260030][ T7242] team0: Port device 0! removed
[   81.264191][ T7242] bond1: (slave geneve2): Releasing active interface
[   81.266669][ T7242] geneve2: left promiscuous mode
[   81.269377][ T7246] validate_nla: 3 callbacks suppressed
[   81.269386][ T7246] netlink: 'syz.1.382': attribute type 1 has an invalid length.
[   81.364496][ T7258] netlink: 'syz.1.386': attribute type 2 has an invalid length.
[   81.409596][ T7265] openvswitch: netlink: Missing key (keys=40, expected=80)
[   81.413947][ T7265] netlink: 'syz.1.389': attribute type 10 has an invalid length.
[   81.417487][ T7265] dummy0: entered promiscuous mode
[   81.420388][ T7265] bridge0: port 3(dummy0) entered blocking state
[   81.424718][ T7265] bridge0: port 3(dummy0) entered disabled state
[   81.427308][ T7265] dummy0: entered allmulticast mode
[   81.433407][ T7265] bridge0: port 3(dummy0) entered blocking state
[   81.435954][ T7265] bridge0: port 3(dummy0) entered forwarding state
[   81.626517][ T7293] netlink: 'syz.0.394': attribute type 13 has an invalid length.
[   81.630079][ T7293] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   81.662382][ T7299] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.007590][ T7337] netlink: 'syz.2.409': attribute type 1 has an invalid length.
[   82.019502][ T7337] netlink: 'syz.2.409': attribute type 3 has an invalid length.
[   82.847454][ T7369] __nla_validate_parse: 62 callbacks suppressed
[   82.847464][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   82.862506][ T7369] lo: entered allmulticast mode
[   82.893355][ T7371] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.989458][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'.
[  132.274695][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  180.431526][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  180.431634][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  193.716293][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.156051][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.593703][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.033390][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
10:20:11  Registers:
info registers vcpu 0

CPU#0
RAX=d679a09cc8387800 RBX=ffffffff81976a48 RCX=d679a09cc8387800 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557423ef5680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f96abf86d00
XMM02=030002000afa0300 02000af803000800 XMM03=01b0030280100005 9003140484000afc
XMM04=0300100001d00300 100001c003021000 XMM05=0100100001800401 000006080606015c
XMM06=d200080001e00300 100001d003001000 XMM07=01c00302100001b0 0302801000059003
XMM08=140484000afc0300 02000afa03000200 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c1ef0ac434c1a500 RBX=ffffffff81976a48 RCX=c1ef0ac434c1a500 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d8000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557423ef4600 CR3=00000000273ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
