last executing test programs:

1.177845734s ago: executing program 0 (id=404):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async, rerun: 32)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="08d2ce90e02919363867311e4f030af2556877159dd0c8fb2be266f495e26a0c69293966d1c1ce7d42feff3d8a31eb9b89720532b04b722ab3ff84b59b59a6ddd95f1085cd9dee99db298fae9a0b3309746bf37c051be18c0f9c621c040bbf03e1", 0x61}, {&(0x7f0000000780)="c5c0f37ce0fc4f5451e5e6d60f731d17e430e180a681e4270fed0442c59f7c3ce74767e1a8483cf6fcdeaadd9a38a8554042688570781621cc4190200b9c88d4cfdf198e7a49c054b1b350e1078d67ff8e68cb56f83d2a8c19d261ef4a0c596c52189944a4694c4a48357cad1286", 0x6e}, {&(0x7f0000000800)="9cb78ff15923d4518bcdda6d50d35d745395e3bab801feed031f3b3938d7b3856114f313c3f926e7a9aa", 0x2a}, {&(0x7f00000009c0)="87e11034b9fd6659fa2148e1024a54d110c428547874a55817e7a8d1a69ec7106156faad729c7b567a890856e30202562778257410be7bc0e08e32b9f34beded6427e841eb77cb405da3dc18f8c5b35c582a9431226ad20740756bd0c26ca6ce7dab734b3171133508f52396fff09830287fff5a1465eeed87368121b89c603835d83bac9a3b1fea7a8305618d422629aa231e073d3d50c7c4cbc2765ca501a436388f9170036060cd1d0421ffcaf86aa8441ff6e08cdd1551f6d16e3a7c11354ad3496bcc3ea25c6aee3bf684", 0xcd}], 0x4}}], 0x1, 0x4040001) (async, rerun: 32)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000280)=@bpq0, 0x10) (async)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x560, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0x1c, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x8, 0x38, 0x0, 0x1, [@typed={0x4, 0x7f, 0x0, 0x0, @binary}]}]}, @typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x10, 0x37, 0x0, 0x1, [@typed={0xc, 0xe4, 0x0, 0x0, @u64=0x7fffffff}]}, @generic="e5f97bc68ab692982b49693af515d11b3e2b028d2bb1b766d9b1c5fb5f426684524297ef352e5db61ad1f08993a742e8b28ad2f2382c3713951d88cabe52ed2ca6d45206ef956f1cb71747437ef299764dd5657c8705f66c70b398e8bd183e19505c4ff294002b53291c3eee66c6f2c66870c1ce81678d752d30835a48aad2213815b50933ddd880be2cb240e015023bacdc7b9236eea1404933dbae1ffcc9e87c18b0f2bec2517634644cb530d9c299b19d238f99484c2cb72c8e5828d6a8f47e313f76d6e5af0919d0e6beab7208963a4c86aaaaa0b747092d73048d5cb30c01aba5", @nested={0x401, 0x75, 0x0, 0x1, [@nested={0xb1, 0x3b, 0x0, 0x1, [@generic="fd1b992869f29a5e4373379d0a51f9e32592c235fb16bd73fc0e27f527fc6afc72cc54a838f7d8c81be58f2611ca880c44b00e8cc48041f90ca1dd8f49d701a307969854dda679244fe61f54ee83aa621cf54403f373054a62d585de62d813f9ee7a0c22d6a22634e7ab8a9f9d949caf8a64bf7cbb097801a431c7e08fcb859b5a", @nested={0x4, 0x100}, @nested={0xc, 0x123, 0x0, 0x1, [@typed={0x6, 0xb3, 0x0, 0x0, @str=']\x00'}]}, @typed={0x14, 0xec, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x71, 0x0, 0x0, @fd}]}, @nested={0x69, 0xee, 0x0, 0x1, [@nested={0x4, 0x24}, @generic="a5ad7f2ad94479eba9e81c4e76b1dddc49b355498e17987f0ebd78a811c3a3cc67c838af150df6897855a70553484b313e8afc063ee70dbc7b8042337e", @nested={0x4, 0x108}, @nested={0x4, 0x5}, @typed={0x8, 0x95, 0x0, 0x0, @pid}, @typed={0x8, 0xc7, 0x0, 0x0, @fd}, @typed={0xc, 0x21, 0x0, 0x0, @u64=0x80000000}]}, @generic="cf466b1a69c6d8dc3a9c6f55483ecb274567a42ba87c3bf140ac3aa1532411ba0a54c49b353e57e55d143bb429d750f6677db23425df34f700fea6771ecc08c185417317beb01ac97a672d3bf4c1c1e12b943ebda111b09108120337f63fc96b46219c635fc26d7aaa4830aa9a0b6ba665c21ba84547ee0e5620ec76ff2a792e4acaa8edef6a692c993867e52db2ed57d10584317b61c45c470b0f7926e276eb00451cbf346f8a569c2995f3edf89aea1d8077b393c3282bcf75bf24238a3ab38927678f938cd33565d92f3cdedd25113bc4912e82f9cc862bc2539dced2", @generic="776d1cf490cd4b65ad1ce9fa511eae0b112ebc34433f41f8a5869c8c15ebb28f1ed0e537619847d87884f8c44c1a0336d56fa0c553140af9a038c84f3cd1b4cb569833168b8e96fd1f6a90d6849391f0ae0eecdc1aefa7814695937b84ee1b4aaadb5df0481b81063fb4aafe57fe27af20059d53b241b30e05404dbd4d91480d78f6670afbf08c47f41f39649cd4a6d6db14c81191c8a09c860354590de909f181d8e9eabef835431955447036e202512d06c3ab6303e5d989609e88d7cf8d", @nested={0xc, 0x11d, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x100}]}, @nested={0x131, 0xb, 0x0, 0x1, [@generic="8f9f9122f465662531564fae4b78d4e633754869978a3af986be268417de6f72990b7251a96ab4f38043d2fbcaf00ac7e8812126e67ad0ddca7ccaae3c8a55a5ca651b2e1893fd416632a72daabdbdc5cc83ae9f856e80da550b2fc23a7cc96d274ad3bc481774b7e22b6765cb8095fb83eacac626a6cc216b642e39c452d68de9238d606413aebe7109ee36ce6e1b3b6f632b8f7c507d5a888c8875d7afb1a49fe346ec30398295735e7657dffa9a764a06687625b4d73a2c2baa045087a4b5fdc91fb6f934e991741078f86744c444c474c52d7e4d07c5", @generic="b9fb22206b8a3d3243e518559684bd4024a9a7bed680d396076b8b888e3a4a96d36a921349bd3d1e016e7c40bc2c017a595b1e16a1c7f908bdbc2dcc4c52e443a67f51fc0561953aa4", @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x200}, @nested={0x4, 0xce}]}]}, @generic="b77e3763f2e43857385093f1c33a1f4457b9696f4eec47c64f34cb48c11ea928001d84b2e9e662b7171e21f5335d"]}, 0x560}}, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000c00000004000000fc"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) (async, rerun: 32)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000007940), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000ac0)={<r4=>0x0, 0x1000, "a9c99f82a7b24f3cb0b4cceadfaceb5ac8249d104fea2c57c5e8ea0a0d88942819a9e5e9e7e484e9569496a74dc6d3a1f2369eda0c11bd636ad2ae6425a02168f0615f73b8e538cb17391013872f483bb7f06a3b94cf478a06fdaa6ec96a8771b594a76b95b24e87b4345fec21f6c2ea1a0efcf4b59b54d9018eb37813bc27e415864538350f9651fe4a2701661b388e0b15a69a4e94665c00d1deaed061e0a5ee37be2e432ba3074635d0579318936477bd09989d34b3143068385b9a4507943feae3ce37394395c3bbce851df26008b74e2c95da3f4528d06a593a1bf69d1638e3d10b3eed4325ec6beeafa16681baa1e39d438cb113ce0cba526e20a2f99cf08dadd83df0df7ee3357aff008533bab681c2d21a85084f3674c542195f8ea31c9a5eb0bef06611649940f348ca888048cb014bc94c1864feeb42be648c2e538d2545ade8db7367df7abe3f745d26c029d8544a259babe77511577734d9f45f2c42282493f55f73fb240f7f5928570825ee8ac6f7e555759fb44d68be5d9621133e83b8c8118095af27b8cd0b9510aaf83cebb7a74a3392a082fcec8a5d128aa68d70da03447e45e4b9c1aa549ef3a030c00672b174aae21b6b7824362f4b5506e8a2864f58eb76ffe802084b244213739b728366e078a57a15fc4564258766e4845d2531eb511a78c0e19d833aacb4a73d83ea6c6a090c1c614be89bc577725d2cfa3824b6231aa6d91929879f82db667db1d7adb95a5e99edd24c5e16870028ba504dc42acb15fd5233cb5a503123b4dbc52fe4f78cfb148b3cd17367edc8fb68eee4351991b1040e77ed655fd56bd3172e180216ab1cfcbad726525e96cf89c85afcfc74d85b9c41fc37232033bd84c952780fc04c255ce52e1d08ed5170b10ad871aa7cceab0a355c9b2e92fe8857b21890ca8575ea675d8bdd6d2dfe010b57afa49ce0164bcbb096841cd398ca7a11c905aa4ace84438e288a15db10a835d72c9c24fffc5e177a58991af91a666403dc5821a331ec04b26016c47208579ab9d3a892fd3176efa21762619cb3927b8a1eabb9974852ec576eb2fe63e09bec666bc7150f715042edb9df012f2aef3067c5976cd7cb5383de34b36f8e33c2c5494be811f04f1d1a6773f03ebe1f3e4f55502b8d0a529c7f578d4fc2f7666a0686e6041c281c7966023add37f4218eac98ac7a9648e89d6c567d98905ffcc6f980ef6b08e2958f5276bad8ab85184d514b9b748105c30ed061841597b2c34f57e27a106976d1b1bf9dd977e8906e993cb356a2bdc3e1cc974cf4c0285ce58cad9d60016b3ded5565269c003a94ed27d960a2d53f48c88b5c2328ca5d1132c50ca3365cfb0abec9a9520e81b36ce33597bf9d24817a749b1365e217f6b01a2ea4e7bba469a239e013bd806cabd51c009485707bf2c68fd2f9ec8fa1c073275a20ec6421ef38dd2c0cad01c351f204105bf2d81d3bbff18cbbba11ef0f4d8430d8d3ed14ef574eca3b86e77fd8b1a2a75d38ccb2c88995c93316acd715c62503c3ac7a8216de24cb5c61f4118a6fac0ea78a71536e263439dab1ebd6a3af677ebba6d0d031b9638e7785800438123b6243aa589d2562412e7c24c218ef32864108a1995f9e4d1ac161032dde65c8d5782a1d125e08f571e63cfb6e4cded55969022b988bbc4f75e6db0f395920fec8b8a3dcb56318165ae90f3d4cef5ed16376f0345c9e4a17a464cd585a4ceb91ceb68f5f1b451c482f1bafd76f166f04dd9540703048a14f257fd06f0010a9f53871e0bd78862adf8da13d9f9bee99aad6285843290d5c09115a838f71ab75593ea16be9f20f6cbebc20bb3438169f629b39e7888ffd1c371e080614542ce829b3e934b42b0fb82144537d9c9cabf1e0093c6031e05faffaff856b4a790e74c859a18de158341a5f311022cb14f3746a0b987513528762df7676269391ed05cd9e98e5803e3ca8fc0ce76dac39ef936bd501ac8f92698d74805b96ef1401d70e71d59658cc2769f1e99a18ef53f0d6cc32dcff11212e86256ed7e977d9a54100630501afa52ed4a5ede13d58a8c9b81cc4c1399348be45aea5ac5fca15f874771eb4c18ba9dea40e2574c6516ef1ffaee02599096f84bceef9efb8894f58a7de9e1a489613ee0c821cbccbc42f296d8f82e60f40bee3c41734f2c7daa0d68286d1b089fa19695624946e7eac5acebca71e4a44a145ed192b886673cab6eb83839733f985ac107791d2316de92b4bdc025758d1f05995b1f2015810fd0848810ee19dc2d1add3253fccf872faec3a829b23798df203486cf78c3dbe248f66e6797a678a4e308d46536c32313883a03a8afe766cd3952d94f6c6486d542b11a13512333978415bf2233eb37243c629c8fd12348211dbe3068ebd46fc0d00dd5f82dbda6770648f54bb5e4889d44d7c54a97e1eabd27fd7e737346466be5ce0dcf37e086c91306e2087dd22d022e3052bfbb827565bea482bbfcf8778f42fd3bad5270b43ab6878792dd436ea26d62d2d0048a045e122cf3d8169f7cb041e5027354825c3c4a3d7fa1e01442f14c9fea7e6fcc1e4e6996380fa8862c6d8f9455f8b5eada95fe762354946373de3e126ef6118d7a329ce4d609d10a3a16ef9d44015743715497684743e933ff8abeca2f258373ae1ecdf09dd369a5088e3a66193c03c8f637f01700629184771f63a2ec881b362ef1a4c4dc5655c724686656cc9ed74322b98e24e4fd94943e409001df2aa7273641ad8f155f2a9aafdec513bf2219e9f16da45f542379edf12110175476b1a50edb9f7c76fcb3285dc1bc1534af342649fe90e28d4f41fa111a0adf04cb1f42a97fefabee2a1e37311e524bb149cd04f802282533a1459e877cbe4059fecb2261d64daef9de705beadc4cc182d9005494feb0ff6742a63a65074cdd66cecf781b80b82e985a0ca610e450d3e76c69bbe4c8ec43d71a66e4fb335caf8f340b1f8b719e3a3502f38fec18d3b88048d7b616eb618dad07d5adc68d0986663c3fc8478d42c3a9ba9315b1998826f29c408c034fa55352d72a418fde2b26308b10a8030a96d1b9b8e8f8c1228e1beb160b5ace89b2bc4df9796ca5c71d1416f21454523842e944051315a41ed52822cd348344411eefd3122eb1ba4e926d3d6169a2c911923b1ecce745d03a177e7eec2d2a59e1e473e1bdbfd64be5fbbfcde496aae383417a31e9a3c8cf63db14f255fe42ea3d95aede1215456b6d80fecb826d153605b0689e1f75b56f677a944887ac7199782f32eabfc308f92fb4021c1acafb11bcfc3f62ea88fca64ac54a9caebf46313e979a37163c29b84f14a39392eedf11a37d6effc412de643e30884ce1b4cf4a320915dd12465232597ba68884c2ec1429086555c397525e08621bf9cabe8bf481cac27599ded6070e39729552686eda6ce5dd52fb6d46bf1f62712ee675fb4e0180ba265e2c6cd6ff34ed01fca3858d6b6e98b61f03b383955461257e3595b8e9908a3d3d3902a062e9044da630d2921231bcb34cb7273fe4b4bb99312a5feac938a29da0516e6533ecf4068a125c1bfea6b0ca4774e43ea23cb85e9527b95461a82667c68de2196f75aa3f998d248487bcbafdf8acb52420713020d57c5e72ea65048c080d66d67f7ecf1afa2cbb4d38f4962f9dd820caa544e8b1503114e9a2af897eb4d4aa16a129ca05bbf158c620da75c4555d6d480a8ad5ed6097e6d149c8a1004562aa5b228e9a871804269587d0f2f45d6e213e7f2afe8f98e967dac5287fa80bfdfc59aae5d8dac932da1cacb0631c723fefba57d210df0f0e4d37b6b0ccf7b9e0688a0bbef1b529f5f17cdc4bc5bd29ee0875aab7c535d9a2ca60fee90b909bbcca308d1bca9d55368d130bbd4a44c042faac2889db909e22342237758483dd8e47055b0ae546b9d93d6a719af26b86a91280e34fc81a01d4e0d5debae4aa43b42aab5bb653aa62f979e1a74aec2b8aec2200fe879877741cd165a3779fcd1cba5703c68daea18a883570151583d1634ddda0edfdedbb3824869d21bce643ef742416c66512cd47fb14982b2ce173227da41de1b61c2ff3fedb965bcfb897d99ab8dad8f956584a75ddfc81a256c075fac211c5c6c7123389adaeb4cacbb2c7566750f28137194a93fb24d7049b5a310894472ee582778a0f7408b446f779489be82edf0b65a3bdee2ff0a515a0910a985496ba940bd369e9303375e228d8038c1061f141405a08b5c6e369544ecf27ee1ad292a915855be13b0eedce22e4139659f8d59b2f3df90cfca11814c88ff1244d5667dc29cbbcb5174efb3bc14087f37011c5d041b4bd87625c34776103bdf737bfffbcebd1e008b26382217829648d8c94e9f2d53ea856bee3a7502adc8443ea4bb87226efdbea72feb8c7b32422d1a3019de1f477cd84408543e2772dc8c3a2c6438eb3a7f5015f86305194b7f1049703839bf5b5ad2883634306cdb1349ecee94c192a3bc4a8f8b851962e6eddecd1418084d1c14eeed6e6934afa699ae8211ca5db32874a5f8dadd45073403edb1f3560f8fb3e68e2d5a4e32a0b4cc6b5d3f2a9a4f8c64ba4bf69b95625f5f3b4e37725452b23d7908ec80478e6764634ba8f8cffd0e93370909c1bd90c5abd2437b5b86b73dec825fde7cf40da9513f350b1caf66a2e3c4634b351d50c826059ae5915598153c1ae21f39ab0e8eb2e90791ad99b162b6777e861453007fcb07837c4cbba4a31086d2bbe10dc76486c5f39b51eb5937360ec88e6592be4086acb494556adb8e0c91944e489ab2349cd4562965155fc065cbe5a2f30389ccad1e36efe8ca73926a16ef2f6d12c7d1f942305959b2c0379d27e8e26dae2d3ea6b9b928576fabaa4c3fa290dddd56791bcab9dbf4f7e3009e5c58c0893899ed9ddbefef771b8a88a826ef7a8cac5c395bdd2f8f0fb8d18ff2d347921749bc1e4e78f80acec000d434c1991410c10269bf0c5c6b93dec575ebd853f3382d02badccad95ad10c4092b7d3ea57790a7333d53516b56ab4ae30dee3c2ea22eb6ca23310c123fbd309a280c6c36e9c90266172ab4f058fd212cfb4cf1d197e5b388fc774ef27a6c19e51ee12e6b51c5840f3feacb5ada6dd14fa612437c097c43b089deb6480f503de39c705d8d90fb21bbe52ca821b11170697595e05830105afbab3d4d672866a31aa98dcf1a8e96a13c4ab209936eab6879292f63c285185945e19d20b7ff88606aabc081622586f5bf582e45e75b079dea868f36f8d1c581099a636fbd2ba143f60d9e264adfeb0ab7579d807542863560ad9bd1f5280a6f7dc49a54d68c9cf142c617a0a7cc38324d0673a668dcb6063bc1fc34d1f2e73a8ef488c217574e1fada64d846bd28e7d39b695fdba4b88534b537afaec89d803e762187296dc4f96794be0b3e101dc39f390e914fecbd4a606d5cccbc5f04feef869cc1e3c15ae1845048bcbb9e600cc29df2131de8f6a3d03289f71ca773ad1eecc5412811345d1a007cc102b4b5a56e8d48d3f6812f5ba6c2fd2b510df6607b41c4edb01370aa2d42b23b7d3e2e109362a3bb65830c38cce822176205fce9eadecc2f9ce6f28f5a981965b11e3519e91b230d6d5d6a52bd3cb884977bb517b0e1a13779b3df8c07ea39fd41b728cf8cad6efc5f61e719d4a42cbf8458b0877c5893b0c7f01e9bf6c120c8ec8c654877f01f7afea61a8906b1544a5d772af0c1ca892062bdfd770baffcc1542afd84ecc3b90168156c58e19936bd98cff5c1d47077584f53c0430ddddb262a3b"}, &(0x7f0000000040)=0x1008)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000008c0)={r4, 0x3, 0x2, [0x0, 0xf81c]}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r7, @ANYBLOB="000000006f0018000500100002000000080040"], 0x30}}, 0x0)

1.018692755s ago: executing program 0 (id=411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getroute={0x14, 0x1a, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c080)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1d, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002634b7bcd641ef774300002064afc44a01bd1f413d5ecdd9128c2043f90782f2c76716a2c03be5978ca4875f170ec7860792f1c6d969caa73ba896a95b0516292d50fce39b328d1fa008892c998cb6d41ce90ef203f2101e2c6187f12628c6faae99cda238c69731"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)

959.912263ms ago: executing program 0 (id=415):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}]}], {0x14}}, 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}]}], {0x14}}, 0xa8}}, 0x0) (async)

897.602424ms ago: executing program 0 (id=416):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="fc0f000000ffffffffffffffea00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000400"/28], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
close(0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/31], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000300000000000000b00"/112], 0xb8}}, 0x0)

888.901458ms ago: executing program 0 (id=418):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="82000000000000000000c0c639016c02ccae000000b7ff0000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000400)=""/151, 0x97, <r4=>0x0, &(0x7f00000004c0)=""/49, 0x31}}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x26, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcfb34ec4}}, @tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x3, 0x3}], 0x10, 0xfffffffe}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x6, 0x10}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pi6   \x00'}, 0x20)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
write$tun(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="06010d0004000600f4044b1d006e0067000007339078ac1414aaffffffff4410c068000001ff000000090000000c940401009404000077adf1db1c1960691567b0c66d6d01cdccd84110a628c36b996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3d9f5800567900000000000000"], 0x78)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r14}, 0x10)
r16 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r15}, 0x8)
close(r16)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x584, 0x6c, &(0x7f0000000200)=""/108, 0x41000, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x5, 0x3, 0x2}, 0x10, r4, r5, 0x0, &(0x7f0000000a00)=[r10, r11, r12, r13, r16, 0x1], &(0x7f0000000a40), 0x10, 0x5}, 0x94)
r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x7, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000000000000000000055090100000000009500000000000000ff3c0900040000006d924600fcffffff186e0000060000000000080019000100183a0000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0xfe, &(0x7f0000000300)=""/254, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1a, r3, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xc, 0x80000001, 0x800}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000440)=[r17], &(0x7f0000000480)=[{0x3, 0x4, 0x10, 0x5}, {0x3, 0x2, 0xf, 0x1}], 0x10, 0x80000000}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x117, 0x2048a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30086, 0x22}}}}}}]}, 0x48}}, 0x24008000)

747.369966ms ago: executing program 0 (id=422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket(0xa, 0x3, 0x3a)
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unshare(0x68040200)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x40000)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000e00)=""/183, 0xb7}, 0x60)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x46, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x9e)
bind$bt_l2cap(r6, &(0x7f0000000ac0)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r8, 0x3f38e000)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYRES16=r11, @ANYBLOB="000227bd7000fddbdf250600000008000a000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

387.518277ms ago: executing program 2 (id=435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108)
r2 = socket$inet6(0xa, 0x3, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600)
write$bt_hci(r3, &(0x7f0000000040)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@any, 0x7fff, 0x9, 0x1, 0xe, 0x7f}}}, 0x19)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fadbdf2501000000de000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', r7, 0x2f, 0x2, 0x0, 0x4, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8710, 0x7}})

255.035597ms ago: executing program 1 (id=437):
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a030000000000000000000100000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}}}, 0x84)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x24000005)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xe}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000084)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x4004040)

254.524558ms ago: executing program 2 (id=438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x301, 0x0, 0x0, {0x641608cf43749154, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x750855e8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x167b8f42}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fdd6b0e}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x6}}, 0xf8}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000040)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x0, @local}}}, 0x93)

197.463487ms ago: executing program 1 (id=439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4)
getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r7=>0x0})
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r8, &(0x7f00000007c0)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', <r10=>0x0, 0x7f18, 0x80, 0x7, 0x9, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x13, 0xda, [@empty, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x3d, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @empty]}, @end]}}}}})
r11 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r15=>0x0, 0x4, 0xc, 0x5, 0x1, 0x16, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80, 0x5, 0x5}})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2b8, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf9e}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dbeb30a}}, {0x8}}}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0080)

197.073717ms ago: executing program 2 (id=440):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a431"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9db6b4", "ec07ff9afd96e6c0"}, 0x38)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0)
r2 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20)
getpeername$inet6(r3, 0x0, &(0x7f00000002c0))
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c0000000300000006000000030000130000000009000000000000000800000003000000000000c0000001000b0000002c070000000200000600000003000005faffffff04000000ffff0000000c0000000400000006000000050000000000000005000000060000000000000200000000010000000000000100000000230057040000007bd9e4b64bea68ac03c249136024ede87d376afd2e7bb012e5729c7837d9ae161038c144190288c3158c1713256a04eaf6b25330f34f2c894ea2dce2f463eb9b1a4f1be38145e730dd31dfe9300b8451b7fa36152b18c8aad7000000"], &(0x7f0000000100)=""/92, 0x97, 0x5c, 0x0, 0x1ff}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r4, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000004, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xfff2}, {0x4}, {0xfff2, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x3c}}, 0x4000)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x2}, 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)

85.857198ms ago: executing program 2 (id=441):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x60)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

84.701627ms ago: executing program 1 (id=442):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) (async)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) (async, rerun: 32)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) (rerun: 32)

83.741794ms ago: executing program 1 (id=443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x24, 0x0, 0x0, 0xfe, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x22}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000)

83.415325ms ago: executing program 2 (id=444):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0xffffffff}, 0x14}}, 0x0)
pipe(0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
read(r6, &(0x7f0000000000)=""/7, 0x7)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES8=r1, @ANYRES8=r5, @ANYRESDEC=r5, @ANYRESOCT=r2, @ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x400c894}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x7, &(0x7f0000000580)=""/7, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800cfd017a6cd1700", @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050004000000"], 0x38}}, 0x40040)
socket$igmp(0x2, 0x3, 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000780)={0xb, {{0xa, 0x0, 0x0, @mcast1}}, 0xffffffff, 0x2, [{{0xa, 0x4ea1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xb7bc}}, {{0xa, 0x4e20, 0x6, @private0, 0x6}}]}, 0x190)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

82.821192ms ago: executing program 1 (id=445):
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcff"], 0x0)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2)

326.138µs ago: executing program 1 (id=446):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r8, 0x89f2, &(0x7f0000000000))
r9 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r9, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf252001000000000000000000000000000200000000000000000000ffff6401010000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000000010008000000000000000000000000ffffffffffffffff07000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000001"], 0xfc}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bind$l2tp(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x1}, 0x10)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

0s ago: executing program 2 (id=447):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) (async, rerun: 64)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x1, @loopback, 0x4}, 0xfffffec1) (async)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={@empty, @broadcast, 0x18, 0x11}}) (async)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000400)="1300000043001f00036ffd2ca83b48ad131747", 0x13)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) (async)
sendto(r3, 0x0, 0x0, 0x4008044, 0x0, 0x0) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r7, 0x0, 0x7f}, 0x18) (async)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14427' (ED25519) to the list of known hosts.
syzkaller login: [   50.053609][ T5830] cgroup: Unknown subsys name 'net'
[   50.125001][ T5830] cgroup: Unknown subsys name 'cpuset'
[   50.130783][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.507465][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.814504][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.818580][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.823979][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.826625][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.830425][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.844528][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.852575][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.857915][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.883292][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.887143][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.888958][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.892958][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.893098][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.900190][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.906059][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.114571][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.224368][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.267661][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.270601][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.273595][ T5842] bridge_slave_0: entered allmulticast mode
[   56.277850][ T5842] bridge_slave_0: entered promiscuous mode
[   56.297613][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   56.304342][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.307004][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.309976][ T5842] bridge_slave_1: entered allmulticast mode
[   56.313881][ T5842] bridge_slave_1: entered promiscuous mode
[   56.376109][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.408421][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.478577][ T5842] team0: Port device team_slave_0 added
[   56.502331][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.505253][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.509154][ T5841] bridge_slave_0: entered allmulticast mode
[   56.512785][ T5841] bridge_slave_0: entered promiscuous mode
[   56.519484][ T5842] team0: Port device team_slave_1 added
[   56.522127][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.525125][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.528554][ T5852] bridge_slave_0: entered allmulticast mode
[   56.532409][ T5852] bridge_slave_0: entered promiscuous mode
[   56.536483][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.539688][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.542033][ T5841] bridge_slave_1: entered allmulticast mode
[   56.544684][ T5841] bridge_slave_1: entered promiscuous mode
[   56.573210][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.576125][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.579877][ T5852] bridge_slave_1: entered allmulticast mode
[   56.582714][ T5852] bridge_slave_1: entered promiscuous mode
[   56.599312][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.602182][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.612674][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.637619][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.640148][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.649501][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.655032][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.664393][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.669779][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.685974][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.725939][ T5852] team0: Port device team_slave_0 added
[   56.731802][ T5852] team0: Port device team_slave_1 added
[   56.760568][ T5841] team0: Port device team_slave_0 added
[   56.768998][ T5842] hsr_slave_0: entered promiscuous mode
[   56.772230][ T5842] hsr_slave_1: entered promiscuous mode
[   56.783198][ T5841] team0: Port device team_slave_1 added
[   56.793776][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.796006][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.806396][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.837580][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.840529][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.852096][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.864212][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.867145][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.878547][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.895756][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.898687][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.909100][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.943324][ T5852] hsr_slave_0: entered promiscuous mode
[   56.946488][ T5852] hsr_slave_1: entered promiscuous mode
[   56.949731][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.952199][ T5852] Cannot create hsr debugfs directory
[   57.016497][ T5841] hsr_slave_0: entered promiscuous mode
[   57.019294][ T5841] hsr_slave_1: entered promiscuous mode
[   57.021716][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   57.023774][ T5841] Cannot create hsr debugfs directory
[   57.212422][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.218886][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.238292][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.248405][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.292428][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.313894][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.320195][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.335680][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.362663][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.371404][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.382486][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.390370][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.456504][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.495138][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   57.511156][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.514280][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.525374][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.530886][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.533880][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.560874][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   57.588429][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.591410][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.603884][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.618660][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.621565][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.662720][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.678569][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.682794][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.699819][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.702814][ T2181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.722605][ T2181] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.725580][ T2181] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.783595][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.826319][ T5842] veth0_vlan: entered promiscuous mode
[   57.833255][ T5842] veth1_vlan: entered promiscuous mode
[   57.853197][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.868471][ T5842] veth0_macvtap: entered promiscuous mode
[   57.872800][ T5842] veth1_macvtap: entered promiscuous mode
[   57.898989][ T5851] Bluetooth: hci1: command tx timeout
[   57.900367][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.910539][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.931030][ T5894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.939646][ T5894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.943115][ T5894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.946281][ T5894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.964717][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.967202][ T5852] veth0_vlan: entered promiscuous mode
[   57.977980][ T5851] Bluetooth: hci0: command tx timeout
[   57.978552][ T5846] Bluetooth: hci2: command tx timeout
[   57.989288][ T5852] veth1_vlan: entered promiscuous mode
[   58.026482][ T5841] veth0_vlan: entered promiscuous mode
[   58.041375][ T5841] veth1_vlan: entered promiscuous mode
[   58.050845][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.055323][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.086605][ T5852] veth0_macvtap: entered promiscuous mode
[   58.098669][ T5852] veth1_macvtap: entered promiscuous mode
[   58.102773][ T5841] veth0_macvtap: entered promiscuous mode
[   58.106685][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.111665][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.123588][ T5841] veth1_macvtap: entered promiscuous mode
[   58.131145][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.139846][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.165641][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.171807][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.202971][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.206057][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.211104][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.215077][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.229721][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.252100][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.258583][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.261614][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.267023][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.299732][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.302530][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.358548][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.361697][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.399112][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.409823][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.443791][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.466297][ T5913] Zero length message leads to an empty skb
[   58.475763][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.481581][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.496414][ T5915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.765965][ T5932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.846382][ T5941] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004
[   58.861296][ T5932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.648709][ T5954] netlink: 844 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.689760][ T5932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.712489][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.906608][ T5958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15'.
[   59.977640][ T5846] Bluetooth: hci1: command tx timeout
[   60.058099][ T5846] Bluetooth: hci2: command tx timeout
[   60.058531][ T5851] Bluetooth: hci0: command tx timeout
[   60.082246][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.170644][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'.
[   60.176979][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'.
[   60.186568][ T5980] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001
[   60.194626][ T5982] Bluetooth: MGMT ver 1.23
[   60.256552][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'.
[   60.328883][ T5989] netlink: 'syz.1.25': attribute type 1 has an invalid length.
[   60.332224][ T5989] netlink: 224 bytes leftover after parsing attributes in process `syz.1.25'.
[   60.905087][ T5932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.097053][ T6038] syzkaller0: entered promiscuous mode
[   61.100887][ T6038] syzkaller0: entered allmulticast mode
[   61.847963][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.863854][ T5875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.879866][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.895144][ T5894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.904606][ T6043] netlink: 'syz.1.40': attribute type 5 has an invalid length.
[   62.027927][ T6052] tipc: Started in network mode
[   62.031034][ T6052] tipc: Node identity 7f000001, cluster identity 4711
[   62.035844][ T6052] tipc: Enabled bearer <udp:syz2>, priority 10
[   62.058100][ T5851] Bluetooth: hci1: command tx timeout
[   62.138780][ T5851] Bluetooth: hci0: command tx timeout
[   62.139157][ T5846] Bluetooth: hci2: command tx timeout
[   62.203587][ T6068] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET)
[   62.313587][ T6079] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.52'.
[   62.523683][ T6095] af_packet: tpacket_rcv: packet too big, clamped from 212 to 4294967272. macoff=96
[   62.622671][ T6100] bridge0: port 3(erspan0) entered blocking state
[   62.625063][ T6100] bridge0: port 3(erspan0) entered disabled state
[   62.630257][ T6100] erspan0: entered allmulticast mode
[   62.633568][ T6100] erspan0: entered promiscuous mode
[   62.635751][ T6100] bridge0: port 3(erspan0) entered blocking state
[   62.638059][ T6100] bridge0: port 3(erspan0) entered forwarding state
[   62.650605][ T6100] erspan0: left allmulticast mode
[   62.652683][ T6100] erspan0: left promiscuous mode
[   62.655733][ T6100] bridge0: port 3(erspan0) entered disabled state
[   62.749247][ T6106] openvswitch: netlink: Unknown nsh attribute 0
[   62.751853][ T6106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.157951][ T2332] tipc: Node number set to 2130706433
[   63.182594][ T6143] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   63.196694][ T6143] 8021q: adding VLAN 0 to HW filter on device team0
[   63.202218][ T6143] bond0: (slave team0): Enslaving as an active interface with an up link
[   63.264068][ T6151] netlink: 'syz.2.74': attribute type 9 has an invalid length.
[   63.291937][ T6154] netlink: 'syz.2.74': attribute type 9 has an invalid length.
[   63.497133][ T6167] __nla_validate_parse: 7 callbacks suppressed
[   63.497149][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'.
[   63.628917][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'.
[   63.634573][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'.
[   63.720902][ T6174] ieee802154 phy1 wpan1: encryption failed: -22
[   63.724038][ T6173] ieee802154 phy1 wpan1: encryption failed: -22
[   63.831092][ T6178] netlink: 2 bytes leftover after parsing attributes in process `syz.0.84'.
[   63.910009][ T6180] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   63.913294][ T6180] netlink: 'syz.0.85': attribute type 2 has an invalid length.
[   63.921672][ T6180] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   63.924990][ T6180] netlink: 'syz.0.85': attribute type 2 has an invalid length.
[   63.928580][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.086828][ T6184] netlink: 'syz.0.86': attribute type 1 has an invalid length.
[   64.091060][ T6184] netlink: 4328 bytes leftover after parsing attributes in process `syz.0.86'.
[   64.137451][ T5846] Bluetooth: hci1: command tx timeout
[   64.218162][ T5846] Bluetooth: hci0: command tx timeout
[   64.218208][ T5851] Bluetooth: hci2: command tx timeout
[   64.321573][ T6196] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   64.356910][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.89'.
[   64.518319][ T6215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.97'.
[   64.683718][ T6229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.102'.
[   64.764000][ T6238] netlink: 112 bytes leftover after parsing attributes in process `syz.1.104'.
[   64.810639][ T6184] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   64.994201][ T6254] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   65.005647][ T6255] batadv1: entered promiscuous mode
[   65.179915][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.183573][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.269259][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.279160][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.360297][ T5894] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.375240][ T5894] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.385903][ T5894] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.390331][ T5894] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.434953][ T6279] warning: `syz.0.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.528834][ T6287] validate_nla: 2 callbacks suppressed
[   65.528847][ T6287] netlink: 'syz.2.120': attribute type 1 has an invalid length.
[   65.703999][ T6300] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[   66.297947][ T5846] Bluetooth: hci0: command 0x0401 tx timeout
[   66.937479][ T6367] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.957007][ T6360] bridge_slave_0: left allmulticast mode
[   66.963514][ T6360] bridge_slave_0: left promiscuous mode
[   66.966422][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.975681][ T6360] bridge_slave_1: left allmulticast mode
[   66.981814][ T6360] bridge_slave_1: left promiscuous mode
[   66.984963][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.004287][ T6360] bond0: (slave bond_slave_0): Releasing backup interface
[   67.011715][ T6360] bond0: (slave bond_slave_1): Releasing backup interface
[   67.020066][ T6360] team0: Port device team_slave_0 removed
[   67.026293][ T6360] team0: Port device team_slave_1 removed
[   67.033810][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.036741][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.043016][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.046154][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.124054][ T6373] macvlan3: entered allmulticast mode
[   67.132841][ T6373] veth1_vlan: entered allmulticast mode
[   67.143829][ T6384] netlink: 'syz.2.152': attribute type 1 has an invalid length.
[   67.146816][ T6385] netlink: 'syz.2.152': attribute type 1 has an invalid length.
[   67.150223][ T6373] veth1_vlan: left allmulticast mode
[   67.191015][ T6384] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.203976][ T6384] bond2: (slave gretap1): making interface the new active one
[   67.216243][ T6384] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   67.228537][ T6385] macsec1: entered promiscuous mode
[   67.230668][ T6385] bond0: entered promiscuous mode
[   67.233873][ T6385] bond0: left promiscuous mode
[   67.283479][ T6384] syz.2.152 (6384) used greatest stack depth: 17272 bytes left
[   67.761712][ T6417] netlink: 'syz.2.161': attribute type 10 has an invalid length.
[   67.789388][ T6417] team0: Port device dummy0 added
[   67.799434][ T6417] netlink: 'syz.2.161': attribute type 10 has an invalid length.
[   67.851259][ T6417] team0: Port device dummy0 removed
[   67.858005][ T6417] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   68.333221][ T6433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.692866][   T33] audit: type=1800 audit(1756896839.000:2): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.174" name="memory.events" dev="tmpfs" ino=312 res=0 errno=0
[   68.879979][ T6469] syzkaller0: entered promiscuous mode
[   68.882254][ T6469] syzkaller0: entered allmulticast mode
[   68.886075][ T6469] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   68.928992][ T6472] __nla_validate_parse: 10 callbacks suppressed
[   68.929002][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   69.236274][ T6502] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   69.315525][ T6508] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.335454][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.339013][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.342499][ T6513] netlink: 31 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.345539][ T6513] netlink: 'syz.0.190': attribute type 3 has an invalid length.
[   69.349920][ T6513] netlink: 'syz.0.190': attribute type 2 has an invalid length.
[   69.352782][ T6513] netlink: 31 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.355835][ T6513] netlink: 'syz.0.190': attribute type 2 has an invalid length.
[   69.371432][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'.
[   69.381544][ T6518] bridge0: entered promiscuous mode
[   69.383628][ T6518] macvtap1: entered promiscuous mode
[   69.389044][ T6518] macvtap1: entered allmulticast mode
[   69.391063][ T6518] bridge0: entered allmulticast mode
[   69.404144][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'.
[   69.410222][ T6518] bridge0: left allmulticast mode
[   69.411939][ T6518] bridge0: left promiscuous mode
[   69.574865][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.194'.
[   69.735600][ T6550] netlink: 'syz.1.199': attribute type 11 has an invalid length.
[   69.940959][ T6572] pim6reg99999999: entered allmulticast mode
[   70.046638][ T6585] syzkaller0: entered promiscuous mode
[   70.051874][ T6585] syzkaller0: entered allmulticast mode
[   70.057934][ T6585] netlink: 104 bytes leftover after parsing attributes in process `syz.0.208'.
[   70.232365][ T6600] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   70.267633][ T6603] netem: change failed
[   70.401638][ T6616] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.430291][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[   70.434786][ T6621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.871726][ T6659] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   70.894026][ T6662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.976769][ T6665] validate_nla: 1 callbacks suppressed
[   70.976782][ T6665] netlink: 'syz.2.240': attribute type 6 has an invalid length.
[   71.009654][ T6665] bond3: entered promiscuous mode
[   71.028090][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.088631][ T6678] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   71.491746][ T6724] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.498141][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[   71.534916][ T6724] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.582927][ T6724] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.631618][ T6732] dvmrp1: tun_chr_ioctl cmd 1074025677
[   71.633610][ T6732] dvmrp1: linktype set to 769
[   71.642840][ T6724] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.752457][ T5894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.768774][ T5894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.779855][ T5894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.796048][ T5894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.379923][ T6776] netlink: 'syz.2.282': attribute type 30 has an invalid length.
[   72.383602][ T6776] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[   73.043625][ T6816] sctp: [Deprecated]: syz.2.292 (pid 6816) Use of int in maxseg socket option.
[   73.043625][ T6816] Use struct sctp_assoc_value instead
[   73.208698][ T6822] bond0: (slave team0): Releasing backup interface
[   73.212271][ T6822] bridge_slave_0: left allmulticast mode
[   73.214433][ T6822] bridge_slave_0: left promiscuous mode
[   73.216582][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.232141][ T6822] bridge_slave_1: left allmulticast mode
[   73.234213][ T6822] bridge_slave_1: left promiscuous mode
[   73.236345][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.243014][ T6822] bond0: (slave bond_slave_0): Releasing backup interface
[   73.249257][ T6822] bond0: (slave bond_slave_1): Releasing backup interface
[   73.253414][ T6822] team0: Port device team_slave_0 removed
[   73.256608][ T6822] team0: Port device team_slave_1 removed
[   73.260141][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.263259][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.577781][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[   73.803837][ T6879] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   73.807054][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.894993][ T6885] netlink: 'syz.1.312': attribute type 1 has an invalid length.
[   73.911205][ T6885] netlink: 'syz.1.312': attribute type 17 has an invalid length.
[   73.953848][ T6889] netlink: 'syz.1.313': attribute type 1 has an invalid length.
[   73.957203][ T6889] __nla_validate_parse: 28 callbacks suppressed
[   73.957214][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'.
[   73.963855][ T6889] netlink: 45 bytes leftover after parsing attributes in process `syz.1.313'.
[   74.143730][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'.
[   74.152741][ T6898] netlink: 72 bytes leftover after parsing attributes in process `syz.1.316'.
[   74.155887][ T6898] : renamed from batadv_slave_1 (while UP)
[   74.198140][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'.
[   74.479035][ T6910] Unsupported ieee802154 address type: 0
[   74.508165][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'.
[   74.530711][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'.
[   74.725179][ T6931] netlink: 'syz.1.326': attribute type 42 has an invalid length.
[   74.811736][ T6937] bridge_slave_0: left allmulticast mode
[   74.813944][ T6937] bridge_slave_0: left promiscuous mode
[   74.816000][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.826927][ T6937] bridge_slave_1: left allmulticast mode
[   74.829867][ T6937] bridge_slave_1: left promiscuous mode
[   74.832028][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.856044][ T6937] bond0: (slave bond_slave_0): Releasing backup interface
[   74.867753][ T6937] bond0: (slave bond_slave_1): Releasing backup interface
[   74.874688][ T6937] team0: Port device team_slave_0 removed
[   74.881853][ T6937] team0: Port device team_slave_1 removed
[   74.884088][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.886590][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.891790][ T6937] batman_adv: batadv0: Interface deactivated: 26
[   74.894336][ T6937] batman_adv: batadv0: Removing interface: 26
[   74.971180][ T6942] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.989103][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'.
[   75.004956][ T6951] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.154187][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   75.191176][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[   75.676708][ T7005] raw_sendmsg: syz.1.351 forgot to set AF_INET. Fix it!
[   75.827494][ T7017] syzkaller1: entered promiscuous mode
[   75.829480][ T7017] syzkaller1: entered allmulticast mode
[   75.850330][ T7027] netlink: 'syz.2.357': attribute type 1 has an invalid length.
[   75.854533][ T7027] bridge: RTM_NEWNEIGH with invalid ether address
[   75.983367][ T7042] netlink: 'syz.0.362': attribute type 1 has an invalid length.
[   75.986501][ T7042] netlink: 'syz.0.362': attribute type 1 has an invalid length.
[   76.419327][ T7069] vlan2: entered allmulticast mode
[   76.421509][ T7069] bridge0: entered allmulticast mode
[   76.479138][ T7082] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   76.754965][ T7107] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.403704][ T7171] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20000
[   77.625546][ T7192] tipc: Started in network mode
[   77.627569][ T7192] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711
[   77.630382][ T7192] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   77.653478][ T7195] tipc: Started in network mode
[   77.656058][ T7195] tipc: Node identity 36d38d9768ae, cluster identity 4711
[   77.659381][ T7195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.661806][ T7195] syzkaller0: entered promiscuous mode
[   77.663729][ T7195] syzkaller0: entered allmulticast mode
[   77.680782][ T7195] tipc: Resetting bearer <eth:syzkaller0>
[   77.735628][ T7193] tipc: Resetting bearer <eth:syzkaller0>
[   77.768809][ T7193] tipc: Disabling bearer <eth:syzkaller0>
[   77.793117][ T7200] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[   78.071890][ T7217] vlan2: entered allmulticast mode
[   78.073911][ T7217] bond4: entered allmulticast mode
[   78.166805][ T7232] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.182637][ T7234] netlink: 'syz.1.413': attribute type 33 has an invalid length.
[   78.251843][ T7234] xt_HMARK: spi-set and port-set can't be combined
[   78.324583][ T7256] netlink: 'syz.2.420': attribute type 9 has an invalid length.
[   78.362773][ T7259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.089969][ T7329] __nla_validate_parse: 32 callbacks suppressed
[   79.089983][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'.
[   79.202601][ T7340] netlink: 68 bytes leftover after parsing attributes in process `syz.1.446'.
[   79.318006][ T5911] tipc: Node number set to 1585286551
Connection to localhost closed by remote host.
[   79.785203][ T5894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.856088][ T5894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.933081][ T5894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.993352][ T5894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.352627][ T5894] bond0 (unregistering): Released all slaves
[   80.398862][ T5894] bond1 (unregistering): Released all slaves
[   80.405244][ T5894] bond2 (unregistering): Released all slaves
[   80.454072][ T5894] tipc: Left network mode
[   80.683188][ T5894] hsr_slave_0: left promiscuous mode
[   80.685401][ T5894] hsr_slave_1: left promiscuous mode
[   80.695309][ T5894] veth1_macvtap: left promiscuous mode
[   80.697985][ T5894] veth0_macvtap: left promiscuous mode
[   80.699824][ T5894] veth1_vlan: left promiscuous mode
[   80.701549][ T5894] veth0_vlan: left promiscuous mode
[   81.259556][   T10] cfg80211: failed to load regulatory.db
[   81.376216][ T5894] ------------[ cut here ]------------
[   81.378970][ T5894] WARNING: CPU: 0 PID: 5894 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[   81.383104][ T5894] Modules linked in:
[   81.385169][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[   81.390239][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.394288][ T5894] Workqueue: netns cleanup_net
[   81.396282][ T5894] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[   81.399534][ T5894] Code: e8 ca de f7 4b 83 3c 2c 00 75 19 e8 3c 5a 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e 5a 7b f7 49 83 c5 08 eb c9 e8 23 5a 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   81.407812][ T5894] RSP: 0018:ffffc9000387f8b0 EFLAGS: 00010293
[   81.410339][ T5894] RAX: ffffffff8a44516d RBX: ffff88810c7e8000 RCX: ffff888022bd3980
[   81.413563][ T5894] RDX: 0000000000000000 RSI: ffffffff8dba8a8b RDI: ffff88810c7e8000
[   81.416852][ T5894] RBP: ffffc9000387f9b0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[   81.420639][ T5894] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffff88810c7e8000
[   81.423909][ T5894] R13: 0000000000000000 R14: ffff88810c8c8000 R15: dffffc0000000000
[   81.427662][ T5894] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[   81.431704][ T5894] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   81.434764][ T5894] CR2: 000055966556c950 CR3: 000000000df36000 CR4: 00000000000006f0
[   81.438533][ T5894] Call Trace:
[   81.439951][ T5894]  <TASK>
[   81.441713][ T5894]  ops_undo_list+0x49a/0x990
[   81.444526][ T5894]  ? __pfx_ops_undo_list+0x10/0x10
[   81.447028][ T5894]  ? do_raw_spin_unlock+0x4d/0x240
[   81.449100][ T5894]  cleanup_net+0x4c5/0x800
[   81.450612][ T5894]  ? __pfx_cleanup_net+0x10/0x10
[   81.452313][ T5894]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.454029][ T5894]  ? process_scheduled_works+0x9ef/0x17b0
[   81.456149][ T5894]  ? process_scheduled_works+0x9ef/0x17b0
[   81.458498][ T5894]  process_scheduled_works+0xae1/0x17b0
[   81.460337][ T5894]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.462237][ T5894]  worker_thread+0x8a0/0xda0
[   81.463703][ T5894]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.465658][ T5894]  ? __kthread_parkme+0x7b/0x200
[   81.467691][ T5894]  kthread+0x711/0x8a0
[   81.469476][ T5894]  ? __pfx_worker_thread+0x10/0x10
[   81.471165][ T5894]  ? __pfx_kthread+0x10/0x10
[   81.472698][ T5894]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.474371][ T5894]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.476044][ T5894]  ? __pfx_kthread+0x10/0x10
[   81.477932][ T5894]  ret_from_fork+0x3fc/0x770
[   81.479492][ T5894]  ? __pfx_ret_from_fork+0x10/0x10
[   81.481110][ T5894]  ? __switch_to_asm+0x39/0x70
[   81.482885][ T5894]  ? __switch_to_asm+0x33/0x70
[   81.484430][ T5894]  ? __pfx_kthread+0x10/0x10
[   81.485982][ T5894]  ret_from_fork_asm+0x1a/0x30
[   81.487796][ T5894]  </TASK>
[   81.488803][ T5894] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   81.491170][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[   81.494104][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.497177][ T5894] Workqueue: netns cleanup_net
[   81.498772][ T5894] Call Trace:
[   81.499845][ T5894]  <TASK>
[   81.500902][ T5894]  dump_stack_lvl+0x99/0x250
[   81.502492][ T5894]  ? __asan_memcpy+0x40/0x70
[   81.504066][ T5894]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.505818][ T5894]  ? __pfx__printk+0x10/0x10
[   81.507528][ T5894]  vpanic+0x281/0x750
[   81.508977][ T5894]  ? __pfx__printk+0x10/0x10
[   81.510518][ T5894]  ? __pfx_vpanic+0x10/0x10
[   81.512165][ T5894]  ? is_bpf_text_address+0x292/0x2b0
[   81.514105][ T5894]  panic+0xb9/0xc0
[   81.515303][ T5894]  ? __pfx_panic+0x10/0x10
[   81.516983][ T5894]  __warn+0x31b/0x4b0
[   81.518471][ T5894]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   81.520473][ T5894]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   81.522543][ T5894]  report_bug+0x2be/0x4f0
[   81.524348][ T5894]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   81.526315][ T5894]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   81.528494][ T5894]  ? xfrm6_tunnel_net_exit+0x80/0x100
[   81.530705][ T5894]  handle_bug+0x84/0x160
[   81.532471][ T5894]  exc_invalid_op+0x1a/0x50
[   81.534361][ T5894]  asm_exc_invalid_op+0x1a/0x20
[   81.536375][ T5894] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[   81.538864][ T5894] Code: e8 ca de f7 4b 83 3c 2c 00 75 19 e8 3c 5a 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e 5a 7b f7 49 83 c5 08 eb c9 e8 23 5a 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   81.546080][ T5894] RSP: 0018:ffffc9000387f8b0 EFLAGS: 00010293
[   81.548465][ T5894] RAX: ffffffff8a44516d RBX: ffff88810c7e8000 RCX: ffff888022bd3980
[   81.551106][ T5894] RDX: 0000000000000000 RSI: ffffffff8dba8a8b RDI: ffff88810c7e8000
[   81.554127][ T5894] RBP: ffffc9000387f9b0 R08: ffffffff8fa39337 R09: 1ffffffff1f47266
[   81.557072][ T5894] R10: dffffc0000000000 R11: fffffbfff1f47267 R12: ffff88810c7e8000
[   81.559861][ T5894] R13: 0000000000000000 R14: ffff88810c8c8000 R15: dffffc0000000000
[   81.562716][ T5894]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[   81.564637][ T5894]  ops_undo_list+0x49a/0x990
[   81.566276][ T5894]  ? __pfx_ops_undo_list+0x10/0x10
[   81.568219][ T5894]  ? do_raw_spin_unlock+0x4d/0x240
[   81.570147][ T5894]  cleanup_net+0x4c5/0x800
[   81.571694][ T5894]  ? __pfx_cleanup_net+0x10/0x10
[   81.573301][ T5894]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.574950][ T5894]  ? process_scheduled_works+0x9ef/0x17b0
[   81.576766][ T5894]  ? process_scheduled_works+0x9ef/0x17b0
[   81.578611][ T5894]  process_scheduled_works+0xae1/0x17b0
[   81.580532][ T5894]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.582737][ T5894]  worker_thread+0x8a0/0xda0
[   81.584388][ T5894]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.586626][ T5894]  ? __kthread_parkme+0x7b/0x200
[   81.588431][ T5894]  kthread+0x711/0x8a0
[   81.589923][ T5894]  ? __pfx_worker_thread+0x10/0x10
[   81.591582][ T5894]  ? __pfx_kthread+0x10/0x10
[   81.593182][ T5894]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.595173][ T5894]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.596837][ T5894]  ? __pfx_kthread+0x10/0x10
[   81.598322][ T5894]  ret_from_fork+0x3fc/0x770
[   81.599801][ T5894]  ? __pfx_ret_from_fork+0x10/0x10
[   81.601439][ T5894]  ? __switch_to_asm+0x39/0x70
[   81.603042][ T5894]  ? __switch_to_asm+0x33/0x70
[   81.604892][ T5894]  ? __pfx_kthread+0x10/0x10
[   81.606678][ T5894]  ret_from_fork_asm+0x1a/0x30
[   81.608523][ T5894]  </TASK>
[   81.610316][ T5894] Kernel Offset: disabled
[   81.611746][ T5894] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:54:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000387f050
R8 =ffff8880215e0237 R9 =1ffff110042bc046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018cb R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055966556c950 CR3=0000000027982000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=76fb600ddf1e6f00 RDX=ffff888034905640
RSI=ffffffff8dba8a8b RDI=ffffffff8be33800 RBP=0000000000000000 RSP=ffffc900037af728
R8 =ffff8880207ebb67 R9 =1ffff110040fd76c R10=dffffc0000000000 R11=ffffed10040fd76d
R12=0000000000000246 R13=ffff888034905640 R14=ffff888123692ce0 R15=0000000000000000
RIP=ffffffff8b7a3c34 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa7f994b3b0 CR3=0000000108fc0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
