last executing test programs:

1m4.949585873s ago: executing program 1 (id=114):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @default, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0xcf, &(0x7f0000000040)=0x6, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0)=0x5, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r6, 0x8b2c, &(0x7f0000000040))
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r7, 0x0, 0x0}, 0x20)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000080)="a66c7e7e27da3be1fe20b53d3b268bdea4d1668333beeac74811bc50efaa561cd1b4", 0x22)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10)
syz_emit_ethernet(0x298, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaa3b5351204506bd877489206086aaaaaa0000000000008848000000006ae1fbc2025e1101ff020000000000000000200000000001ff0200000000000000000000000000014b0a04056928080000000000000000000000000000000001fe800000000000000000000000000020ff020000000000000000000000000001fc000000000000000000000000000000fe80000000000000000000000000003906040000000100000010fe8000000000000000000000c910ff020000000000000000000000000001000000002110010000000000fe880000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000aafe8000001f00000000000000000000003dfc00000000000000000000000000000120010000000000000000000000000002fe80000000000000000000000000000cfc0100000000000000000000000000002c000000000000003e00000000000000a106040307900800fe8000000000000000000000000000bb0000000000000000000000000000000100000000000000000000000000000000320c028000000000fe80000000000000000000000000002bfe800000000000000000000000000039fe8000000000000000000000000000aafe8000000000000000000000000000aafe8000000000000000000000000000aaff0200000000000000000000000000014e224e20009e9078aa87887d36ae1040e7d9a0e653bae8752a10c9397ab05100a82e5cd4b2fea004059a98cef4381394017a4b645223c3c3a50800000000000000bb395bba3ac4ff950e5801cd1fcfb7a3249d6fe9757655a621dbb6bae44e14b884f80b869082e0bf25166518fc21587ca1433bda4401af6f9df740a14fd3ea83d58e4c47792cb9d2962d2634abbae47a589baddc1527ff5f0b8a85b179133df1aa2ef43b137a8c57fd738b6029897dd0281b0c2516c7b995c6059fad48c6972680bc0b61bff4e33b7531dd705f9ab85a4185bd4b112f28b8cd1d4f7d149d86148b1ed755ff56e77ad4239c6263de335c2ebff27df144c1fb1b6b03ccab5c70f709cb56e970890efb0b1f1c49c143bf813ac0e99cf042f7ac731eea25dab63c4e03c73dbec1c63aa498ef014c8fa99d7272a8e84efa962459387402ce2f7928f7100f7343047b09bdb8bc0ce73bf66af8"], 0x0)
ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0)

1m4.754186199s ago: executing program 1 (id=117):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000000c0)=""/144, &(0x7f00000001c0)=0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010028bd700000f4812496cc42008000022020000000000700fa3702fd23708810", @ANYRES32=r3, @ANYBLOB="08000100e0000001080002007f000001"], 0x34}}, 0xea5bc50b6199d77e)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0)

1m4.704315074s ago: executing program 1 (id=118):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1000}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000280)="ab301d0696b274f724645c701373c4e9993ce9f69357762e494f262c65", 0x1d}, {&(0x7f00000002c0)="813a33ad5086d531082b38ea25b1c09156752cd34e04349e7d87ee4f53b088f546c9778873c2db39d3fd5504d61a70f5ddc263f4b5a5104e97e40de8653896c03273878d1905e295afed077dd41d7cffc9fe7ae5064e46f210dd64f87841d225df5aa73b9f35c88ad67b56122dc0e42e19abe15f9550536a47254f3f523cad891c304b", 0x83}, {&(0x7f0000000380)="c7d1f345d869c3e7f41dca5d092022c68f10de272101caaf79f15de84135de8840c1d6b75f51ee29971c90175ecbd06f7dbc0b6637649de9d1ca595772db47ff88ad769374d0b7cfd40bdc8e3c14e1d1ddf862c15cc2bc0e86a3028ac7517daa4f04d89402f63aeedfa5e0b1ea82056590e257a330bbff7aa1a16e1b95ee5876e7ca55d4e3e028413f77d435ffe862a3b571616272d118889d7aaef13b53184ba6dd00b2b975e346f40aeb1b16aec22039b3adc330302349ddb5028548824b88b0e4c4e363d9a84a7d7a99b1871c43198d5f4f3317b7c81327", 0xd9}, {&(0x7f0000000680)="24954a7467480598234f628627c4c80904f13f2bd9d4fd56869de593e3105cc4d52db440395700765fe2d4d2757ab96d87cc3dfb7e32504108bf8f355fc90c636718ebb8f48c155d238c6cc1593cd1ab6fddfe5152639997c83e0123c41d39e0ba05259248d1a145be70856fa28ea28c4fc5c2399b56881dbfe45628e9daaec2a69f22c19ff90abf562ba7cea712c257895baede063a1bdcb8dc8bd13e4dc0b78b905b2263d2430fe90922b5", 0xac}, {&(0x7f0000000e00)="fcfec4a371a1b8ab90bf8d2c24fc5069c7c26f11595a41378d6d2700c616a70682f9ea524015e80f4508f4cea2639f3b0821ac6137185e18093344a4e73376f1ec7bdbd9c1b7f933eb0fc85641ceffb4cc5ed8a3194a968a881d3c6988a47e9da58073997e13e5cff4e77700eb7c6e8d3f9278b31a65add1525b5db85589c1d3c0b98ad3c48fd13b0e5ec51b6a92a8ee41fba1d11f902d2058bfdcdc0c3529c787486e6731ab046a79569cce3fe7389779e70f12c6db29deefaaf5ffe652ddc91a3f505678fc8ff7f18511ac32f9bebfedd6049f890b8e9c618682cc4b46b338b8e3c966b1d17d212bc020da20c005fb048c68e4eea0ddf17a2ea60523eece641e835cffd8de6e397b7487f2f37f841eccd745c42b1e184c1f60765c0130d8dea5dca340ee52bc02934f2a3587691832ced47795a245ed7c113c42e3ae474450258a2712f1196f0149c533bf4689a19287dbd352c18b0dce17cb380a96b8a235b3b5c17c598aabf9fd5936c40602536fd9f898be405c13988969cbbef4f66789a4ee5599edce127002837ea6950b8c461b43041384a853b49ee7070f98e52c59765d3eba5f7ee060371087f00435aed5ec1d93e3cf7ab09c8ec8b923f603af429c6a273bec9bd97f658d8f89e3f6afa29e48f3908fd0fd0656d459e422adb22c47b913ff1dbc5cd0a42116b82b1552169fd0ce815a3ee7db44b82de2345d92b16be18bba36523974bab930caca4027af1f24a8ef47aa80b4f8ebf9f6958221116e929a7f5f82a7350b04b79f45dbde9a8545fe65dfe85c7b59bff7f9dd992c70bc2983559bdc60ca34edc71422fc08fbdcb5e64976c45d7feb53e7e9e90de39d904b7e44f37a379d8da4f75c06e62269f723c61bd69ac139662459fcdaae08d568c34bd9d4286b59a17e386d2294316faa504f8cb14be71ca4462866d90cfc79c2f61cc6cb7edc3ec4673e48de9799f9b84e015805f509687e73790f9582d3535560b712f6b44aa48406c8a59f6491efd5141e42a09a6d2bdbc245e413a5c96f5b291cb81f610b0c651cefc477ca9bf327e88b32904bdcb48f80fd23ed54dcda5f0e37002c5fa96032e1866cca6df40b987bf451956031291eafb9161ca70a42ee6f7a21ecd7a1713909982cef54420fe77231248aed1e09bc8ed002e5f913967d4fabb0365d09883c7a9a18b9e39530fd250d72f679cddbf8dbf3eb02f060277f39b4be28e4fdd8f37246db686d2baf75d60faa630cc657fe0401f88cdfc5c7469b63b56d939d5589905ae166f3e0d6aadf58ed1ec2a57d95e461e7b466e456fad16340a5204d30e1d8056eef7b9f84549548de52d94cf30afc71d40180cd4daf7aca5ae2b1ee07c2b4378012e8f1ac4cee1ef76e0a4dd30e4fc4bd9b07ed35dd2aad0b11b20b6fae5968daef9fece4b2603ca0617315aaf46d2c87a9a324125166a3eab170ab13c5167101589c2ac9f7f2f1067addfc3729eb047c7079b09076bfb6e1ed6edf96b6ad399d0ccc4aa88be2000af1e9def84593eebadaa28089c8fa724fe0e6bec22ad246fc17380fb3674cd006ef1d394e41695ccf754c94001288df44c430ed879428a6bd2b2a9f804c2728fc69a899f6c4ed68db5e8a7f99410f556e2c0a42d15bb5a347d46b794b0c4500439dca0ef6158089387a92649d002d35f4c97f8cda6a5df883e3bd61c10ce01bd90402a03984c9c1ef7bd31830cfd2da3c588977da98015977bb24eac4707595a1f4a4ea552c1bb1122e1abe5a6f97c7f320da63ee5146bce651cd7697862cb65f57f8ceafb6d7bf42e7ec18aedbcf27081e3db2da1132b60a1f439ddd6052bea8e0bbd82a863e2607832bef8029ae05e8bbc481803df291a3e0026885a59501567b5a9abb58fc924c42d63ba5d2a79a206bfcf64314355765857696a772542d029abc9b4d4327f53450f4126fc19f4cfd65987e6b2fc7d6273c6a582c7b07da75a4f55a0c374e3ec365366d8eefc64914d40a1ad3005c1a582fa099660c7333df5c4b13fe602cb88840e802f79ab8f536a1a7524b70af98431b10c361c20d9f2c6d975a85b55e48fa7443e5e1fac09f43be02db94abcaa52a5da6828e06df7d3e491ee175de9afae55781eb305fd42b033492fa73e686fc17060ef1683ac884e6b5c657f8d3b32e714c36237169e96d5c7fa429b088bc45afbd86706d4423ad79e16a31bcd68207b88aec904c582bada159cfc29adfbebf38ef75d73b6e48a674f2099890cf02af2caace3846b053a0120987ca4814c1d682ec2fbbee060f48fb9381a7eab040bd0008aa88e70d163edf7246d06064b5294ed07bbd0a62b3a6c7db62cfa757334446a0edfaceec32e8c7e3848c10ba71eb4b8fafdef870f0d13afeb2036066ee17f4faaf2a62617ec314c51a0e3ed0a628d0c1509c69446bbee454daf593b5cd7e0d8faf10d5e9a152645c5a1eefad5c1c742414c4310923bd08ec57f89f8114a503b4dc40c49d5b4ea9498bf03c2b82e1ce51d0ccf8756018c9cd43880ff46fbf77aa6aabf29670bc4e6542a0c255cb36112faef72f5284c3715f20ddad794aabc082d6b640401f6006035845cabd2ffac3dc74b101c2eecca2464424eeb690d1ed53aecf47d3363cc74e55f8e9d78ce900f92166be7266b2f70bd8378020d403be6e05dd96bd2d176639455bb81d674bdd43a587e93accbe1f9a4b70579f8bbcad79bffbe7b8679b628b5de20d9ae8d725480973a063ee8964217d3fe50c4dbe2e21ca55b1a00a103c37f4f51895bd539d6b90579db68e805ed161685266c6da79c4d3bf5e099069247cd245255b8bf4bb77e7dc8cddc316f65ab767563dec1f81aa92a2b4f852379113062bf9fb9c6cd5a44d434c38d13aaaf55c895169e30b21b753c867b16b97ba70208ef9bf8cb3da876ecc6e00369c29e5c0c756209ec6ab551490f2f0f2c781743ab489771f7409670564bc1fbd5da925e4ce2464b8155144c7a511d6edf1013440b80a75b3a8d8fc45170a0f571df18da54ecb9d05fd36361d93cfa8dfc3329c3588bf3c6584c144df7222ba6ba6f9d16a01313b251fd5c9d4f2df15e76d18ee5de54f155ec3ac2351fb6a305fdb8e6b23edb20f491581f4804f23f3040192ebebc654a6e3cfaa5dddb85bc0e806a3bedfdfa65952be5c47f37865b3f56df3a4a1c1cd078f14aaf482dd2111af5844864c7a9c59a0d195a972b6c9bfc58afa7be6c822c72838ae31898a13a4ca8d3643176791e713916784ceafa4cbfbe600c5039b5af791b4cc7253bd0cd27050eb9466b443c73e9a428a9843b60f529af98403af75b23c12ebbf19459915adfbb3d96dd9369d1d2228e5a8ca02186d66a6351621f9a64587662210c01a71eeb6bf44bd50ac7a342b5343a837ad7acba583342d67a497d4162ce42e4de5536b5122527ae20209e8260798fb1fb2411b72aa521635bf6136e8fb4a7bd5b4cde289b35d124c9ce0e74b175af298cea06c2629e3630dc43ef84a0ea35a3fc28aa6fc0c6a226be628aaa13eaf3b737688d84e3fe91997fd0ea42f0102cedcb2317214083e14f86058c33d8e6af06a9688ad11e4a16959148530c61a9e1c131ab7482aac78bbcbd56f85575a79873a2b1eb507c52a392ffc4f3bb0fcf8dc6b65334b5ab7622e550121d10b78a031b1c69d3c94cdbeda8c10cfbbf9122a672520792649f4b0eb59ec62d1bebc7d62cd3eeb4d3f0eba0466d4d20af2c67628f403d453185c03bf678addb1673ebaeb78718608a827dfd2b610392d0fb3c10f1637e317f48a43fc8388425d7f6b4075203dd81bedc55c06035a217ef18d0dfcb83f6f9ec4978e203a997776882cc3ef8caca1bfe3bef4151dc15089bf485c71fda726bd5eb3cf322fabca3c2e812c3629e8a24dd89942f3e2a84cad6be61d225d2ee22fd120aaea4bd3222d7af9d5f4aef19a9e8b026524640ebf1c6f60df665a9af5643b7c078f1b695e9ab2ba9bee3f071eb8da16973f0f72b83e2fb53732e3fa132458c5a40ae0884f0d97f7ef70411f5ba03efe5923fc5d90367cfffb7d53c375f6801b193977e5b1a151a385e030e4e60420c4db780d21159a7ff045087571087983832622964ee86372779526cdbfffba54de609e1a5e1c917ed99277f84be1d6f43d8e93167d4ed370994c05c526897e10798ef27235c554493f84860e36ebd3cfc732363ca17744a7d735d7ffd0add645faaeaf1ae1deffddab3d830afe9a587e277b44c297f67bdc02f0931f7773cc4092e036d6c67fe06813af791c7d54f36f2a1324f6ec9172b404e23dd49f4954d92336dfa9ad0a0a28c475aba87bd32451e815b1c045f50a33c9537835fa061b8e1fe015545a62a8a95614dbb0c9ad1bc545390326381c5a7cdff0aaa86cd2626442df3c07ee2d7f0f99c6cc2372916fa87c1351845520cec4e6ef6513db7087da2284734dfc1577bbefbf98fae72c11b1987fa64e7ca66cf4f877803394260f3eaebc551ee689985f6a53008c000b5972b60cb69f3b30270a1e0b433d968776a3b2181aa4e53948e59a0071253f4cd272c164e8dfd5078310c6a152c5fa832ae28acb990b0eac6a0a1e002adad423c53349b9153af893463d9896b5f5900643805dfa3254fbc5052f9d1207ca038e6857848f63bf1824fe4ca989d0b7f49941b9cc31177f186a8200c1009a7c443e0eeb6844717821249236ebb302574a3ab7e245fe337310ceb5538f3b50205bb864ce5d510fc01e969129d58c3ec3521785b407391cac72e5884199014ed88b9ba4820f2c2b0f291ba779e58d74bebe111c720ea177604371902ea44d49ff0940ab04e2b29fddab97c83157ddfe9f19a0072849d88f1907bbd6212b2b5a7a47b87fd5e2b89dde6ef420904fdb951fe7a04a57cbda08133072ac26069c5e06b38c0891bdeb90ff55868aeb6b7b31560c446d974e3a7209f56f877356cf17c4ce7306ad08ac62e7f3721ee19f44cdead98e77a393e7d374568a1120d00f8e00d767fb810ef110b0a2ce359f7ba3d72d53819fe1e5770299846c6d3ed1309706a2c76808ec026db9f65c125a3699006a291b83089a175f535720013d746fbe00f2a3b9de5e8ac0ca6a8caab843225bc79328f9f7ae9427d540feffa5d94fa9bc184687afc82c2f083de59a8c23d6d6ed21df75c7b9eed6d81a33446bee9036f092e3620587c061bc564ea55a811c82440624cecbe4f706fa4054401e46328ec84c34664c624dfec7356137b612d6d3c64da91dc1b41ebf8c0bee03ba561bff07b15649c76a1c5e5d34fe3793166bb03a773a662a1530398c15cc427aaa037518821ef50617f588efb061647febd602abebddb1b56a5dcb48718bd18934a0d0cdf632002eb049870fa47d95302b134d25884d0aad9a2895f6e9ebb4cfa0edc9177a26f46146ce56d7a0087d34df23f6918acda9f2d4850d7c666167305a6173d48eef4eccc1af5257e69e5e9ad429654e06362316d890dfbc9070bc48ca4aed5e56fb7f7d8612533ff93f4ba92ea9069e5559ff53e0dfab4873c0e55c8dbd531b2b2fcbdd0c2b67f8fcac6a301ff0e8812b49c6a803bb33728b0ca13595d23cddfd6af32b1cf4b82490d17e15aa85f6e0dfd2e86e857ef971acbea3d1b761af5e62f12c2ceedf2de9a7b368e848cbdabe18cdc85868e27da2cfc42cdbe0606bb97a233e48dcb50ee523ddfe9a58a9a38fb989463edea60e8faa878390ab45514a646ab2936d083c3a3c921b2165cac0b76e408acb08b95db78151a49bcc8a1a00b190dfc8992a28ea7d74d61f4ad143d55b", 0x1000}, {&(0x7f0000000580)="9cb8d74b47277cd403f7e7c405917bb19f376d01ee84420774274b4d630693e1b49523a8e2f8be2ea9632a3cb601b83208e940828ac51037eba27841e0f6dd65f588", 0x42}, {&(0x7f0000000740)="677d1cd9c6b0a966bd62eb564e99a2a4861a1cf58e287c36af3865f56b7ebf18feeadea0ddf1db24e4282433c4869eff35c4e558f19ad005f761a1bf43c9f8238f77576554410e266681b09ab5873756474ac7a88e4ed13ed7b9e61bc5b8471cec1f57797ebc6ca17bd25018ca9fd3f1751eaef862a571dd49ee2340e3af4e3964fb45cde672f0c320d6a88bdd6e43f1e23d96677e0c9ef3812c67b12d944828404c723c65d1710eb808f5e8", 0xac}], 0x7}, 0x4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r6, 0x80503d01, &(0x7f0000000200))
ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xffffffff, 0x3, 0x7})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x51}, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x5, 0x1, 0x10000})

1m4.604503698s ago: executing program 1 (id=120):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2b, 0xfeffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18}, 0x44008090)

1m4.526776293s ago: executing program 1 (id=121):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m4.462384698s ago: executing program 1 (id=122):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'pimreg1\x00'})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118c000000000085000000070000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x1}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000480)="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", 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x2000c000) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x2000c000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@delchain={0x0, 0x65, 0x51bad5f08a7b5f38, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xa}, {0xffe0, 0x4}}, [@TCA_RATE={0x0, 0x5, {0x2, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0x9}, @TCA_CHAIN={0x0, 0xb, 0x8}]}, 0xffffff74}, 0x1, 0x0, 0x0, 0xc850}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@delchain={0x0, 0x65, 0x51bad5f08a7b5f38, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xa}, {0xffe0, 0x4}}, [@TCA_RATE={0x0, 0x5, {0x2, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0x9}, @TCA_CHAIN={0x0, 0xb, 0x8}]}, 0xffffff74}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d00000004000000060000000e00000004350100", @ANYRES32=r9, @ANYBLOB="8000000000f24dd7bc24b2000006000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="02000000030000000200"/24, @ANYRES32=r8, @ANYBLOB], 0x50)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
r13 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$FICLONE(r13, 0x40049409, r9) (async)
ioctl$FICLONE(r13, 0x40049409, r9)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
write$nci(r5, 0x0, 0x0)

49.327568183s ago: executing program 32 (id=122):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'pimreg1\x00'})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118c000000000085000000070000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x1}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000480)="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", 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x2000c000) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x2000c000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@delchain={0x0, 0x65, 0x51bad5f08a7b5f38, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xa}, {0xffe0, 0x4}}, [@TCA_RATE={0x0, 0x5, {0x2, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0x9}, @TCA_CHAIN={0x0, 0xb, 0x8}]}, 0xffffff74}, 0x1, 0x0, 0x0, 0xc850}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@delchain={0x0, 0x65, 0x51bad5f08a7b5f38, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xa}, {0xffe0, 0x4}}, [@TCA_RATE={0x0, 0x5, {0x2, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0x9}, @TCA_CHAIN={0x0, 0xb, 0x8}]}, 0xffffff74}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d00000004000000060000000e00000004350100", @ANYRES32=r9, @ANYBLOB="8000000000f24dd7bc24b2000006000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="02000000030000000200"/24, @ANYRES32=r8, @ANYBLOB], 0x50)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) (async)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
r13 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$FICLONE(r13, 0x40049409, r9) (async)
ioctl$FICLONE(r13, 0x40049409, r9)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
write$nci(r5, 0x0, 0x0)

1.893788257s ago: executing program 0 (id=1087):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000800)=0xfffffff8, 0x4)

1.819664837s ago: executing program 0 (id=1089):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000800)=0xfffffff8, 0x4)
r3 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

1.819407471s ago: executing program 0 (id=1090):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) (async)
r0 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0}) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) (async)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff) (async)
shutdown(r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) (async)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000002c0)={<r8=>0x0, 0x9}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000180)={r8, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000780), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12) (async)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000700)={'bond0\x00'})

1.73452965s ago: executing program 0 (id=1092):
socket$inet(0x2b, 0x801, 0x0)
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002afddbdf250c0000001c0032000088000005002d00000000000500350003000000000000843279b100ecdfab35890177bd689952a2ae269728295f6db7cfabf39c101d6794e586977b6f92c9a78b9a27a244a6ddb83d909661784d879155ffffd322371d0b6b938758c32437d12c391b4610b8f3c4e1fabd92bb4a8ec2f36ea75f570b00004e9247a603dd1f31ebdfbcb55e627f863b41cbb6e44177d57e87a465f22af0732880b636b8d46d8031837fba4cf3bb05fa703f0d005789d39ee07bd1a95f1b656e2cd29b9c69f0adeaa4"], 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
tee(r2, 0xffffffffffffffff, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123c000000000061134c0000000000bf1000000000000015000200071b60013d020100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000070600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586f9305ab24fede751b184bcf3a2da2873ad8cfdbaf16b96c57de9f771c0a3e92a1a595965c5106b49611bf32e3af18e578870c7cd59be5d4881f1280fc1103e421e93c5929cfcf841ae7a045b81ab18504a0409446fffea9a428c477fb4ab5c8c3b309f6585e7070db5048c0231d9519be44d8dcad428c60de7163450a6c2a131170267d2abc76189ccefea343fdeb77dc0af2b14748e05bdcfcf535b90d0ea8ce64d148bb2ab0650c346cb9492242d13ea3eac49e6c7c43beaa0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
close(r7)

1.65235532s ago: executing program 0 (id=1097):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250800010000000000080015000000000008004f000000000008004b0013000000080003000000003150dd6166a9d12be32dfb765363b824b007cb7b6fcfbc790a76808defa3699985d0cc21972ee41ebc8a031a96c07499e2b6e3d47314"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)

1.571678763s ago: executing program 0 (id=1098):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x8, 0x20000001, 0x6, 0x101}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x2}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000100)=0x8001, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x134, 0x30, 0x1, 0x0, 0x3, {}, [{0x120, 0x1, [@m_mpls={0x11c, 0x8, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8906}]}, {0xbe, 0x4, "0c62481bb96cb8e7957fb3787e1df2f80d8ddf739b1b4dcd8723a0f794ef9b0100000091068c8c241008e1dfcf2481148a96cc244e1f0ac6021048d5167c902f0d9f36201b856619622bfa031993994e4d020001a7824f489214ae55f882e2702062e7c40aba6f6dad5055c1dc6d2ae89677fe94a0a3ac5a2aa5223b4fef4b0ac96950de641d8321e8e55e972744e6e36e4075c024e8bfa3980e0fbc9c3e0519950200000091f1a0a3f53e4a6a98f6bd4e628851d71027afdc4e"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x134}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f00000001c0)=0xffff, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
recvfrom(r6, 0x0, 0x0, 0x6a3618f8e8bf5f71, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

259.587757ms ago: executing program 3 (id=1120):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x8800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faa")
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x1, 0xff, 0xae6, @vifc_lcl_addr=@broadcast, @rand_addr=0x64010100}, 0x10)
connect$netrom(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0028"], 0x28}}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r6, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x818, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="b33ccef3b175"}}]}]}]}, 0x6c}}, 0x0)

259.464065ms ago: executing program 2 (id=1121):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0xfffffff0}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)

255.156459ms ago: executing program 2 (id=1122):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r2, 0x0, 0x3}, 0x18)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x0)
poll(&(0x7f0000000040)=[{r3, 0x2124}, {r3, 0xb0c4}], 0x2, 0x11ff)
shutdown(r3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYRES8=r4, @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f00000001c0)=[{0xc5, 0x7, 0x68, 0xe}, {0x29, 0x40, 0x6, 0x116}, {0x400, 0x40, 0x8, 0x81}, {0x3, 0x9, 0xc3, 0x32fb}, {0x6019, 0x7, 0x80, 0x9ef5}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r9, &(0x7f0000000780), 0x12)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
bind$x25(r8, &(0x7f0000000080), 0x12)

169.448725ms ago: executing program 3 (id=1123):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu.stat\x00', 0x7a44, 0x1700)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x11, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000002c0)={0x0, 0xfff0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x5882, 0x4)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, 0xffffffffffffffff, 0x0, 0x1500}, 0x38)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e6bb0}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x200, 0x3c}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10448)

123.874458ms ago: executing program 3 (id=1124):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="e2", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="3000000000000000840000000100000004000100090000008e0c0000ff070000330000e2cc00009199f044e9757c510572133200"], 0x30, 0x8000}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000)

118.342642ms ago: executing program 2 (id=1125):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x78, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x49, 0x3, "7d56351f328ff4cc8c6ebeb47df936ce8784a9f2343781abde1b5a6fd5679eec1b221ee91d3fe92158c8175bafad23e5f290adf37ca024fa13bda4f6e3c9fc11b2394e4939"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x3)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x8800)
r5 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(r6, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faa")
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000ecfedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1808000001a201001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x4)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="b33ccef3b175"}}]}]}]}, 0x6c}}, 0x0)

60.760399ms ago: executing program 2 (id=1126):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xc)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4}, &(0x7f0000000100)=0x8)

58.944626ms ago: executing program 2 (id=1127):
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0002"], 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

58.354519ms ago: executing program 3 (id=1128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x900, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWSET={0x5d0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_DESC={0x5bc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf87d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x92d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x389}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8cad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd87b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab5}]}]}, @NFTA_SET_DESC_CONCAT={0x158, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f8000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xde8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x74}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7be}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, @NFTA_SET_DESC_CONCAT={0x1f0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4938f7e1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe3af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2fa6b86e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa319}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2ea205f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5fe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1a2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFT_MSG_DELTABLE={0x290, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x69, 0x6, "32ae2020001058e6d34e01f0dd9e5786105282bc3b8a48a0bb06d5f9ed275bb270a183512bfd8f2bfe606ba5c8f5f1bb0b6a890008cd656c4a5d6a5fe0c7f0c9360734c3867b1a43726fe86883d6ebead5a99db05ff0c377c6ca9508b90e94ae5a15e8fb65"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb2, 0x6, "f1d2c3c89213707b1b5bf14f708851abc23a5c5fd096c46bf0c398f0e35e7ce549b0051ba83424af7c5da20e5ebe1ae188a9459bd2a77f428c5eb0a33231391840f5b0df2f79bb7a76cec0d63b971fdf858d699e0ed01701ecf133173adbb94c6a3ece58e1d06eaad34e7c35804571d1affcc1f8cf9d0869b6dcae8ad685a0986df1c1595566292f93e840968398379a083b8036de1c025946bfa1ea5ec9842bf9cdb9347a98bef226e8bd0cfc26"}, @NFTA_TABLE_USERDATA={0x55, 0x6, "e011fbc7fca37587bf970143cbaff27c87398b9f0ed42a0c25df1b2dc1bbdcace2cafe45d4b4bfc135a054917f9746cc5c7f0d4ab3316b24dea80b9734092f8b05c5feb42cbdb6f68c0764cb6d31dbc36f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd6, 0x6, "7f89cd4db5a1e39c83d8ccd7516102282385d287498d2ac91969741f88b0ee30e8d0b85d271152062a44d19051fd218b59393ada9a0d92c0c828b77b5a745553b30d5c31b5a40bf985c55ce7a29586f6e530dd0475ce7403e2d8ba16a2c4759f7d568146a8e1cc1f591791d06c1affeb5292da358b98005c9930942f1d0e1eea9433a9c84ca8893956c0c59e407dd1643120fbb6b4b5470adda07c86934e8f13a9f43a840cead8e8d2d01a95b9003503d82cbc1d838575630ff2f3cee8380d29954e68493ca0a7dd823c41974322329714b8"}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x250, 0x6, 0xa, 0x105, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x16c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7f61}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, '/dev/net/tun\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8210}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x10}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xbd}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x158, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6889}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd24}, 0x1, 0x0, 0x0, 0x20040014}, 0x8000)

3.877155ms ago: executing program 3 (id=1129):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bdad, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c095}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0)

3.576646ms ago: executing program 2 (id=1130):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x7, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000e00)={0x2, 0x5e24, @rand_addr=0x64010100}, 0x4f)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
accept4(r4, 0x0, 0x0, 0x80000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r5, 0x0, 0x3}, 0x18)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r6, 0x1000000)
poll(&(0x7f0000000040)=[{r6, 0x2124}, {r6, 0xb0c4}], 0x2, 0x11ff)
shutdown(r6, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000e40)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r8, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r9 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

0s ago: executing program 3 (id=1131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWSET={0x47c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_DESC={0x468, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x158, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6400000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f8000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xde8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x74}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x1a8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4938f7e1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe3af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2fa6b86e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa319}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000003}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2ea205f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5fe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1a2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFT_MSG_DELTABLE={0x290, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x69, 0x6, "32ae2020001058947b4e01f0dd9e5786105282bc3b8a48a0bb06d5f9ed275bb270a183512bfd8f2bfe606ba5c8f5f1bb0b6a890008cd656c4a5d6a5f726fe86883d6ebead5a99db05ff0c377c6ca9508b90e94ae5a15e8fb6500"/101}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb2, 0x6, "f1d2c3c89213707b1b5bf14f708851abc23a5c5fd096c46bf0c398f0e35e7ce549b0051ba83424af7c5da20e5ebe1ae188a9459bd2a77f428c5eb0a33231391840f5b0df2f79bb7a76cec0d63b971fdf858d699e0ed01701ecf133173adbb94c6a3ece58e1d06eaad34e7c35804571d1affcc1f8cf9d0869b6dcae8ad685a0986df1c1595566292f93e840968398379a083b8036de1c025946bfa1ea5ec9842bf9cdb9347a98bef226e8bd0cfc26"}, @NFTA_TABLE_USERDATA={0x55, 0x6, "e011fbc7fca37587bf970143cbaff27c87398b9f0ed42a0c25df1b2dc1bbdcace2cafe45d4b4bfc135a054917f9746cc5c7f0d4ab3316b24dea80b9734092f8b05c5feb42cbdb6f68c0764cb6d31dbc36f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd6, 0x6, "7f89cd4db5a1e39c83d8ccd7516102282385d287498d2ac91969741f88b0ee30e8d0b85d271152062a44d19051fd218b59393ada9a0d92c0c828b77b5a745553b30d5c31b5a40bf985c55ce7a29586f6e530dd0475ce7403e2d8ba16a2c4759f7d568146a8e1cc1f591791d06c1affeb5292da358b98005c9930942f1d0e1eea9433a9c84ca8893956c0c59e407dd1643120fbb6b4b5470adda07c86934e8f13a9f43a840cead8e8d2d01a95b9003503d82cbc1d838575630ff2f3cee8380d29954e68493ca0a7dd823c41974322329714b8"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x290, 0x6, 0xa, 0x105, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_EXPRESSIONS={0x16c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7f61}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, '/dev/net/tun\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8210}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9ab}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x81}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x10}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xbd}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x158, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6889}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc24}, 0x1, 0x0, 0x0, 0x20040014}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x7, r2}, 0x38)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70e1fcdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="08002c00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0x8000)
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10)
getsockopt$inet6_tcp_buf(r12, 0x6, 0x21, 0x0, &(0x7f00000009c0))
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x38, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x40000)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r13)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20088' (ED25519) to the list of known hosts.
syzkaller login: [   40.977146][ T5771] cgroup: Unknown subsys name 'net'
[   41.086554][ T5771] cgroup: Unknown subsys name 'cpuset'
[   41.090046][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.460227][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.277869][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.280814][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.286111][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.289365][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.292664][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.363266][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.366905][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.369877][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.373853][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.376747][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.388818][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.392655][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.395557][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.399144][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.402210][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.567781][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   46.579131][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   46.676939][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   46.720313][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.723883][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.726348][ T5848] bridge_slave_0: entered allmulticast mode
[   46.729030][ T5848] bridge_slave_0: entered promiscuous mode
[   46.733050][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.735821][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.738320][ T5843] bridge_slave_0: entered allmulticast mode
[   46.740974][ T5843] bridge_slave_0: entered promiscuous mode
[   46.755353][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.758282][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.761114][ T5848] bridge_slave_1: entered allmulticast mode
[   46.765273][ T5848] bridge_slave_1: entered promiscuous mode
[   46.768348][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.771026][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.773979][ T5843] bridge_slave_1: entered allmulticast mode
[   46.777043][ T5843] bridge_slave_1: entered promiscuous mode
[   46.823062][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.828004][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.844182][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.860668][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.871277][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.874813][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.877872][ T5850] bridge_slave_0: entered allmulticast mode
[   46.881799][ T5850] bridge_slave_0: entered promiscuous mode
[   46.899747][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.902963][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.906001][ T5850] bridge_slave_1: entered allmulticast mode
[   46.909837][ T5850] bridge_slave_1: entered promiscuous mode
[   46.934362][ T5848] team0: Port device team_slave_0 added
[   46.937578][ T5848] team0: Port device team_slave_1 added
[   46.952391][ T5843] team0: Port device team_slave_0 added
[   46.973160][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.977333][ T5843] team0: Port device team_slave_1 added
[   46.981170][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.986335][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.988623][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.997572][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.025573][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.027945][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.036592][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.048704][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.051311][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.060956][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.066471][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.069213][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.079334][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.088200][ T5850] team0: Port device team_slave_0 added
[   47.097134][ T5850] team0: Port device team_slave_1 added
[   47.124944][ T5848] hsr_slave_0: entered promiscuous mode
[   47.127181][ T5848] hsr_slave_1: entered promiscuous mode
[   47.146738][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.149059][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.157801][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.170434][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.173489][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.183076][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.191113][ T5843] hsr_slave_0: entered promiscuous mode
[   47.195002][ T5843] hsr_slave_1: entered promiscuous mode
[   47.197596][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   47.199975][ T5843] Cannot create hsr debugfs directory
[   47.305987][ T5850] hsr_slave_0: entered promiscuous mode
[   47.308208][ T5850] hsr_slave_1: entered promiscuous mode
[   47.310312][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   47.312158][ T5850] Cannot create hsr debugfs directory
[   47.417578][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.423382][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.437615][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.454058][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.489526][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.498990][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.513045][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.515391][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.518117][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.520497][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.543106][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.548613][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.556853][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.561828][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.590088][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.600148][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.605582][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.609867][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.669571][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.696428][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   47.715469][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.717704][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.720942][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.723367][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.735397][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.744663][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.762104][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   47.771037][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.773474][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.778129][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.780423][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.794951][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   47.804169][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.806492][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.821160][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.823622][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.973890][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.995357][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.011789][ T5843] veth0_vlan: entered promiscuous mode
[   48.025512][ T5843] veth1_vlan: entered promiscuous mode
[   48.046051][ T5848] veth0_vlan: entered promiscuous mode
[   48.058433][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.061465][ T5848] veth1_vlan: entered promiscuous mode
[   48.067592][ T5843] veth0_macvtap: entered promiscuous mode
[   48.077466][ T5843] veth1_macvtap: entered promiscuous mode
[   48.106191][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.111176][ T5848] veth0_macvtap: entered promiscuous mode
[   48.118737][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.127605][ T5848] veth1_macvtap: entered promiscuous mode
[   48.142649][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.145755][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.148976][ T5850] veth0_vlan: entered promiscuous mode
[   48.150964][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.160594][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.164687][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.175870][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.182237][ T5850] veth1_vlan: entered promiscuous mode
[   48.198433][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.205248][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.209497][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.213455][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.246956][ T5850] veth0_macvtap: entered promiscuous mode
[   48.253516][ T5850] veth1_macvtap: entered promiscuous mode
[   48.253533][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.261240][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.304197][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.307690][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.310012][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.339590][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.353708][   T55] Bluetooth: hci0: command tx timeout
[   48.354257][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.358518][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.365070][ T5693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.370081][ T5693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.390469][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.412055][ T5693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.416183][ T5693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.422679][   T55] Bluetooth: hci2: command tx timeout
[   48.422896][ T5236] Bluetooth: hci1: command tx timeout
[   48.439634][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.443243][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.496664][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.508375][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.546176][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.548720][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.573709][ T5912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.598401][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.608290][ T5913] bond0: (slave rose0): Enslaving as an active interface with an up link
[   48.626381][ T5916] tun0: tun_chr_ioctl cmd 2147767520
[   48.728561][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   48.732109][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'.
[   48.760624][ T5927] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.175160][ T5958] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET)
[   49.392127][   T10] cfg80211: failed to load regulatory.db
[   49.434279][ T5964] netlink: 'syz.0.17': attribute type 21 has an invalid length.
[   49.437073][ T5964] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17'.
[   49.689253][ T5971] bridge0: port 3(erspan0) entered blocking state
[   49.723199][ T5971] bridge0: port 3(erspan0) entered disabled state
[   49.725748][ T5971] erspan0: entered allmulticast mode
[   49.731136][ T5971] erspan0: entered promiscuous mode
[   49.733803][ T5971] bridge0: port 3(erspan0) entered blocking state
[   49.736131][ T5971] bridge0: port 3(erspan0) entered listening state
[   49.745668][ T5969] erspan0: left allmulticast mode
[   49.747323][ T5969] erspan0: left promiscuous mode
[   49.753303][ T5969] bridge0: port 3(erspan0) entered disabled state
[   50.105054][ T5987] Zero length message leads to an empty skb
[   50.421249][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[   50.424637][ T5236] Bluetooth: hci0: command tx timeout
[   50.508353][ T5236] Bluetooth: hci2: command tx timeout
[   50.508374][   T55] Bluetooth: hci1: command tx timeout
[   50.636309][ T5953] Set syz1 is full, maxelem 65536 reached
[   50.671427][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.723131][ T6029] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[   50.729092][ T6030] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[   50.797850][ T6037] netlink: 'syz.0.48': attribute type 21 has an invalid length.
[   50.801223][ T6037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.48'.
[   51.051619][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[   51.068169][ T6054] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   51.070672][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'.
[   51.100788][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'.
[   51.895567][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   51.962106][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[   52.540419][   T55] Bluetooth: hci0: command tx timeout
[   52.585031][   T55] Bluetooth: hci1: command tx timeout
[   52.588236][   T55] Bluetooth: hci2: command tx timeout
[   52.728630][ T6126] Bluetooth: MGMT ver 1.23
[   52.798730][ T6128] netlink: 'syz.2.82': attribute type 29 has an invalid length.
[   53.265418][ T6064] Set syz1 is full, maxelem 65536 reached
[   53.485290][ T6148] netlink: 'syz.2.90': attribute type 2 has an invalid length.
[   53.549943][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.854016][ T6155] bridge_slave_1: left allmulticast mode
[   53.856031][ T6155] bridge_slave_1: left promiscuous mode
[   53.857971][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.864679][ T6155] bridge_slave_0: left allmulticast mode
[   53.866696][ T6155] bridge_slave_0: left promiscuous mode
[   53.868763][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.196725][ T6168] syzkaller0: entered promiscuous mode
[   54.198592][ T6168] syzkaller0: entered allmulticast mode
[   54.209754][ T6171] syzkaller1: entered promiscuous mode
[   54.222391][ T6171] syzkaller1: entered allmulticast mode
[   54.227745][ T6171] netlink: 'syz.0.99': attribute type 11 has an invalid length.
[   54.592896][   T55] Bluetooth: hci0: command tx timeout
[   54.674113][ T5236] Bluetooth: hci1: command tx timeout
[   54.676616][   T55] Bluetooth: hci2: command tx timeout
[   55.177274][ T6200] __nla_validate_parse: 67 callbacks suppressed
[   55.177284][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'.
[   55.185080][ T6199] syzkaller0: entered promiscuous mode
[   55.186884][ T6199] syzkaller0: entered allmulticast mode
[   55.218823][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   55.227040][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   55.227054][ T5907] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.233266][ T5907] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.236841][ T5907] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.240095][ T5907] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.281403][ T6208] vlan2: entered allmulticast mode
[   55.539273][ T6228] netlink: 'syz.1.118': attribute type 83 has an invalid length.
[   55.769015][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   56.197271][ T6250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.123'.
[   56.200810][ T6250] tipc: Started in network mode
[   56.204645][ T6250] tipc: Node identity 7222906e75bf, cluster identity 4711
[   56.208041][ T6250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.211620][ T6250] syzkaller0: entered promiscuous mode
[   56.216226][ T6250] syzkaller0: entered allmulticast mode
[   56.227182][ T6250] tipc: Resetting bearer <eth:syzkaller0>
[   56.230375][ T6249] tipc: Resetting bearer <eth:syzkaller0>
[   56.238858][ T6249] tipc: Disabling bearer <eth:syzkaller0>
[   56.384461][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'.
[   56.387417][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'.
[   56.527908][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'.
[   56.689825][ T6284] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   56.810223][ T6284] bond1: entered promiscuous mode
[   56.811934][ T6284] bond1: entered allmulticast mode
[   56.814784][ T6284] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.819854][ T6284] netlink: 'syz.0.133': attribute type 29 has an invalid length.
[   56.971367][ T6314] tun0: tun_chr_ioctl cmd 2147767520
[   57.203040][ T6330] tun0: tun_chr_ioctl cmd 2147767520
[   57.351686][ T6336] dvmrp0: entered allmulticast mode
[   57.370854][ T6336] dvmrp8: entered allmulticast mode
[   57.445656][ T6335] dvmrp0: left allmulticast mode
[   57.447723][ T6335] dvmrp8: left allmulticast mode
[   57.853404][ T6372] sctp: [Deprecated]: syz.2.159 (pid 6372) Use of int in max_burst socket option.
[   57.853404][ T6372] Use struct sctp_assoc_value instead
[   58.819074][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[   58.930676][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'.
[   58.939639][ T6417] bridge_slave_0: left promiscuous mode
[   58.941662][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.967874][ T6417] bridge_slave_1: left allmulticast mode
[   58.969785][ T6417] bridge_slave_1: left promiscuous mode
[   58.971626][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.987457][ T6417] bond0: (slave bond_slave_0): Releasing backup interface
[   59.002543][ T6417] bond0: (slave bond_slave_1): Releasing backup interface
[   59.026241][ T6417] team0: Port device team_slave_0 removed
[   59.041596][ T6417] team0: Port device team_slave_1 removed
[   59.051156][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.063249][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.071482][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.077831][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.248442][ T6433] tun0: tun_chr_ioctl cmd 2147767520
[   59.433822][ T6445] tipc: Started in network mode
[   59.435650][ T6445] tipc: Node identity 62c56b859383, cluster identity 4711
[   59.438532][ T6445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.441363][ T6445] syzkaller0: entered promiscuous mode
[   59.444271][ T6445] syzkaller0: entered allmulticast mode
[   59.453624][ T6445] tipc: Resetting bearer <eth:syzkaller0>
[   59.464755][ T6445] tipc: Disabling bearer <eth:syzkaller0>
[   61.149177][ T6507] __nla_validate_parse: 3 callbacks suppressed
[   61.149187][ T6507] netlink: 212856 bytes leftover after parsing attributes in process `syz.0.203'.
[   61.350608][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   61.355320][ T6511] IPVS: Error joining to the multicast group
[   61.363435][ T6511] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   61.525043][ T6520] netlink: 'syz.0.207': attribute type 10 has an invalid length.
[   61.530899][ T6520] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   61.582621][ T6524] netlink: 'syz.0.209': attribute type 1 has an invalid length.
[   61.596692][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.607454][ T6524] bond2: (slave bridge1): making interface the new active one
[   61.610720][ T6524] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   61.618944][ T6524] netlink: 72 bytes leftover after parsing attributes in process `syz.0.209'.
[   61.622031][ T6524] netlink: 72 bytes leftover after parsing attributes in process `syz.0.209'.
[   61.630306][ T6524] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   61.707327][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'.
[   61.810532][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'.
[   61.960668][ T6534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.983625][ T6534] syzkaller0: entered promiscuous mode
[   61.985577][ T6534] syzkaller0: entered allmulticast mode
[   62.063426][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'.
[   62.081514][ T6533] tipc: Resetting bearer <eth:syzkaller0>
[   62.767245][ T6533] tipc: Disabling bearer <eth:syzkaller0>
[   62.816492][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'.
[   62.864329][ T6548] vlan2: entered allmulticast mode
[   62.866312][ T6548] bridge0: entered allmulticast mode
[   62.868439][ T6548] bridge0: port 1(vlan2) entered blocking state
[   62.870604][ T6548] bridge0: port 1(vlan2) entered disabled state
[   62.912443][ T6548] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   62.924466][ T6560] netlink: 'syz.2.219': attribute type 29 has an invalid length.
[   62.927389][ T6560] netlink: 'syz.2.219': attribute type 29 has an invalid length.
[   62.930067][ T6560] netlink: 'syz.2.219': attribute type 29 has an invalid length.
[   62.997558][ T6566] _Z`Ԁ@S: entered promiscuous mode
[   63.109227][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'.
[   63.120875][ T6578] netlink: 'syz.0.227': attribute type 13 has an invalid length.
[   63.123681][ T6578] netlink: 'syz.0.227': attribute type 17 has an invalid length.
[   63.129838][ T6578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   63.384401][ T6593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.943525][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'.
[   64.509347][ T6621] !: renamed from dummy0 (while UP)
[   65.663142][ T6683] sctp: failed to load transform for md5: -4
[   65.746704][ T6691] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   65.750115][ T6691] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   66.243749][ T6724] tun0: tun_chr_ioctl cmd 2147767520
[   66.468993][ T6734] __nla_validate_parse: 11 callbacks suppressed
[   66.469010][ T6734] netlink: 52 bytes leftover after parsing attributes in process `syz.0.276'.
[   66.474771][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'.
[   66.564933][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[   66.706270][ T6749] netlink: 72 bytes leftover after parsing attributes in process `syz.2.281'.
[   67.514654][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.283'.
[   67.617394][ T6764] netlink: 'syz.0.285': attribute type 1 has an invalid length.
[   67.642450][ T6764] 8021q: adding VLAN 0 to HW filter on device bond3
[   67.648240][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[   67.717556][ T6771] syzkaller0: entered promiscuous mode
[   67.720220][ T6771] syzkaller0: entered allmulticast mode
[   68.458623][ T6787] netlink: 'syz.0.291': attribute type 12 has an invalid length.
[   68.461657][ T6787] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.291'.
[   68.544514][ T6791] Driver unsupported XDP return value 0 on prog  (id 54) dev N/A, expect packet loss!
[   68.669643][ T6808] netlink: 'syz.0.297': attribute type 13 has an invalid length.
[   68.672229][ T6808] netlink: 'syz.0.297': attribute type 17 has an invalid length.
[   68.676113][ T6809] netlink: zone id is out of range
[   68.706512][ T6808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.709492][ T6811] netlink: 'syz.2.300': attribute type 2 has an invalid length.
[   68.719071][ T6811] netlink: 'syz.2.300': attribute type 1 has an invalid length.
[   68.729197][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.836794][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.992102][ T6821] dvmrp0: entered allmulticast mode
[   69.077481][ T6820] dvmrp0: left allmulticast mode
[   69.209317][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   69.212211][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   69.219409][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   69.856166][ T6857] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   69.860830][ T5907] bond0: (slave wlan1): interface is now down
[   69.867486][ T5907] bond0: now running without any active interface!
[   70.416430][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.420711][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.431088][ T6882] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.436382][ T6882] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   70.987408][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.990325][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.074881][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.079696][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.085297][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.089438][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.093232][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.216489][ T6887] chnl_net:caif_netlink_parms(): no params data found
[   71.278219][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.280645][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.285756][ T6887] bridge_slave_0: entered allmulticast mode
[   71.289126][ T6887] bridge_slave_0: entered promiscuous mode
[   71.293388][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.295921][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.298468][ T6887] bridge_slave_1: entered allmulticast mode
[   71.301345][ T6887] bridge_slave_1: entered promiscuous mode
[   71.307293][ T6909] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[   71.335696][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.341436][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.383553][ T6887] team0: Port device team_slave_0 added
[   71.387380][ T6887] team0: Port device team_slave_1 added
[   71.408124][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.410970][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.424166][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.428718][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.431138][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.440666][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.493080][ T6887] hsr_slave_0: entered promiscuous mode
[   71.496416][ T6887] hsr_slave_1: entered promiscuous mode
[   71.499144][ T6887] debugfs: 'hsr0' already exists in 'hsr'
[   71.501144][ T6887] Cannot create hsr debugfs directory
[   71.656234][ T6887] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.660570][ T6887] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.665793][ T6887] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.670106][ T6887] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.694203][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.697191][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.700795][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.703640][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.771653][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.790181][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.795656][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.815347][ T6887] 8021q: adding VLAN 0 to HW filter on device team0
[   71.826685][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.829789][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.840928][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.843959][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.966704][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.027346][ T6887] veth0_vlan: entered promiscuous mode
[   72.038565][ T6887] veth1_vlan: entered promiscuous mode
[   72.077628][ T6887] veth0_macvtap: entered promiscuous mode
[   72.086648][ T6887] veth1_macvtap: entered promiscuous mode
[   72.110963][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.121200][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.130735][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.137426][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.141141][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.147675][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.206994][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.215514][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.233773][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.236547][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.372962][ T6944] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[   72.375695][ T6944] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   72.474895][ T6959] __nla_validate_parse: 8 callbacks suppressed
[   72.474905][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'.
[   72.481903][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'.
[   72.485524][ T6959] netlink: 'syz.3.343': attribute type 18 has an invalid length.
[   72.495566][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'.
[   72.495761][ T6936] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.498509][ T6959] netlink: 'syz.3.343': attribute type 18 has an invalid length.
[   72.518129][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.526946][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.536692][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.658119][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'.
[   72.668342][ T6972] dvmrp1: tun_chr_ioctl cmd 1074025677
[   72.670262][ T6972] dvmrp1: linktype set to 773
[   73.147068][ T5236] Bluetooth: hci3: command tx timeout
[   73.420821][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'.
[   74.672562][ T7003] mac80211_hwsim hwsim2 <: renamed from wlan0
[   74.786699][ T6985] Set syz1 is full, maxelem 65536 reached
[   74.932222][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[   75.079435][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'.
[   75.085727][ T7029] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   75.103756][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'.
[   75.197249][ T7042] syzkaller0: entered promiscuous mode
[   75.199201][ T7042] syzkaller0: entered allmulticast mode
[   75.222534][ T5236] Bluetooth: hci3: command tx timeout
[   75.290903][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.0.381'.
[   75.523915][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'.
[   76.146180][ T7074] lo speed is unknown, defaulting to 1000
[   76.150659][ T7074] lo speed is unknown, defaulting to 1000
[   76.158989][ T7074] lo speed is unknown, defaulting to 1000
[   76.175682][ T7075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.303789][ T7081] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[   76.321574][ T7081] 8021q: adding VLAN 0 to HW filter on device team0
[   76.325227][ T7081] bond0: (slave team0): Enslaving as an active interface with a down link
[   76.376718][ T7074] infiniband syz0: set active
[   76.378527][ T7074] infiniband syz0: added lo
[   76.386060][    T9] lo speed is unknown, defaulting to 1000
[   76.409217][ T7074] RDS/IB: syz0: added
[   76.411030][ T7074] smc: adding ib device syz0 with port count 1
[   76.413311][ T7074] smc:    ib device syz0 port 1 has pnetid 
[   76.423110][ T7074] lo speed is unknown, defaulting to 1000
[   76.448505][ T7093] ksmbd: Unknown IPC event: 4, ignore.
[   76.481437][ T7095] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   76.543147][    T9] lo speed is unknown, defaulting to 1000
[   76.552171][ T7074] lo speed is unknown, defaulting to 1000
[   76.654676][ T7074] lo speed is unknown, defaulting to 1000
[   76.762162][  T972] IPVS: starting estimator thread 0...
[   76.774677][ T7109] tipc: Enabled bearer <udp:s>, priority 10
[   76.852441][ T7110] IPVS: using max 82 ests per chain, 196800 per kthread
[   76.888078][ T7074] lo speed is unknown, defaulting to 1000
[   77.100158][ T7074] syz.2.386 (7074) used greatest stack depth: 19104 bytes left
[   77.302854][ T5236] Bluetooth: hci3: command tx timeout
[   77.783187][   T47] tipc: Node number set to 4047924101
[   78.155294][ T7163] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[   78.178025][ T7163] __nla_validate_parse: 10 callbacks suppressed
[   78.178034][ T7163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.416'.
[   78.201813][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'.
[   78.209532][ T7163] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.287782][ T7175] netlink: 'syz.3.420': attribute type 10 has an invalid length.
[   78.290508][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'.
[   78.294097][ T7175] bond0: entered promiscuous mode
[   78.295862][ T7175] bond_slave_0: entered promiscuous mode
[   78.298113][ T7175] bond_slave_1: entered promiscuous mode
[   78.300140][ T7175] bond0: entered allmulticast mode
[   78.302039][ T7175] bond_slave_0: entered allmulticast mode
[   78.306456][ T7175] bond_slave_1: entered allmulticast mode
[   78.308953][ T7175] bridge0: port 3(bond0) entered blocking state
[   78.311241][ T7175] bridge0: port 3(bond0) entered disabled state
[   78.315156][ T7175] bridge0: port 3(bond0) entered blocking state
[   78.317466][ T7175] bridge0: port 3(bond0) entered forwarding state
[   78.465128][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'.
[   78.528656][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.428'.
[   78.682861][ T7217] tun0: tun_chr_ioctl cmd 2147767520
[   78.833711][ T7224] vti0: entered promiscuous mode
[   78.835372][ T7224] vti0: entered allmulticast mode
[   78.838920][ T7224] openvswitch: netlink: IP tunnel dst address not specified
[   78.872096][ T7226] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   78.946279][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'.
[   78.962610][ T7233] team1: entered promiscuous mode
[   78.964781][ T7233] team1: entered allmulticast mode
[   78.989895][ T7237] netlink: 5 bytes leftover after parsing attributes in process `syz.2.442'.
[   78.994489][ T7237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.999611][   T47] lo speed is unknown, defaulting to 1000
[   79.025774][ T7239] nftables ruleset with unbound set
[   79.031367][ T7239] netlink: 'syz.2.443': attribute type 32 has an invalid length.
[   79.035088][ T7239] syzkaller1: entered promiscuous mode
[   79.037093][ T7239] syzkaller1: entered allmulticast mode
[   79.392774][ T5236] Bluetooth: hci3: command tx timeout
[   79.807022][ T7255] bridge0: port 3(bond0) entered disabled state
[   79.809610][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.812389][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.819120][ T7255] netlink: 'syz.3.450': attribute type 2 has an invalid length.
[   79.821648][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'.
[   79.837401][ T7255] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   79.917479][ T7261] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.027437][ T7274] tun0: tun_chr_ioctl cmd 2147767520
[   80.095373][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'.
[   80.151410][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   80.310955][ T7287] lo speed is unknown, defaulting to 1000
[   80.546188][ T7311] netlink: 'syz.0.467': attribute type 10 has an invalid length.
[   80.546722][ T7312] netlink: 'syz.0.467': attribute type 10 has an invalid length.
[   80.558124][ T7312] netlink: 'syz.0.467': attribute type 10 has an invalid length.
[   80.570620][ T7312] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   80.574721][   T12] bond0: (slave syz_tun): interface is now down
[   80.579301][   T12] bond0: now running without any active interface!
[   80.608024][ T7311] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.610754][ T7312] bond4: option mode: unable to set because the bond device is up
[   80.847138][ T7320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.868631][ T7320] syzkaller0: entered promiscuous mode
[   80.871115][ T7320] syzkaller0: entered allmulticast mode
[   80.879111][ T7320] tipc: Resetting bearer <eth:syzkaller0>
[   80.883096][ T7324] netlink: 'syz.3.472': attribute type 10 has an invalid length.
[   80.891806][ T7324] 8021q: adding VLAN 0 to HW filter on device team0
[   80.896430][ T7324] team0: entered promiscuous mode
[   80.898636][ T7324] team_slave_0: entered promiscuous mode
[   80.901297][ T7324] team_slave_1: entered promiscuous mode
[   80.904542][ T7324] team0: entered allmulticast mode
[   80.906675][ T7324] team_slave_0: entered allmulticast mode
[   80.909090][ T7324] team_slave_1: entered allmulticast mode
[   80.912057][ T7324] bond0: (slave team0): Enslaving as an active interface with an up link
[   80.965651][ T7319] tipc: Resetting bearer <eth:syzkaller0>
[   80.975328][ T7319] tipc: Disabling bearer <eth:syzkaller0>
[   81.318591][ T7341] netlink: 'syz.2.479': attribute type 10 has an invalid length.
[   81.325524][ T7341] 8021q: adding VLAN 0 to HW filter on device team0
[   81.329302][ T7341] bond0: (slave team0): Enslaving as an active interface with an up link
[   81.537578][ T7364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.580757][ T7371] dvmrp8: entered allmulticast mode
[   81.583922][ T7371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.612234][ T7364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.676160][ T7364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.732007][ T7364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.809933][ T5693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.819483][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.833815][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.847101][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.056668][ T7389] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   82.413553][ T7371] dvmrp8: left allmulticast mode
[   82.442043][ T7412] tipc: Started in network mode
[   82.444243][ T7412] tipc: Node identity 2a6c19b607a4, cluster identity 4711
[   82.446994][ T7412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.450698][ T7412] gre0: entered allmulticast mode
[   82.486322][ T7412] tipc: Disabling bearer <eth:syzkaller0>
[   82.495163][ T7414] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[   82.593570][ T7418] veth3: entered promiscuous mode
[   82.597072][ T7418] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   82.778543][ T7428] syzkaller1: entered promiscuous mode
[   82.780819][ T7428] syzkaller1: entered allmulticast mode
[   83.210205][ T7448] __nla_validate_parse: 8 callbacks suppressed
[   83.210218][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'.
[   83.293335][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.519'.
[   83.431053][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[   83.640112][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'.
[   83.645532][ T7462] netlink: 248 bytes leftover after parsing attributes in process `syz.3.522'.
[   83.901987][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'.
[   84.198294][ T7497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'.
[   84.884708][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'.
[   84.895305][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'.
[   85.066216][ T7530] lo speed is unknown, defaulting to 1000
[   85.142368][   T55] Bluetooth: hci3: command 0x0405 tx timeout
[   85.341004][ T7538] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   85.414768][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'.
[   86.257432][ T7548] netlink: 'syz.3.548': attribute type 15 has an invalid length.
[   86.260249][ T7548] netlink: 'syz.3.548': attribute type 15 has an invalid length.
[   86.288306][ T7551] netlink: 'syz.3.549': attribute type 1 has an invalid length.
[   87.949442][ T7645] netlink: zone id is out of range
[   87.951591][ T7645] netlink: zone id is out of range
[   87.957954][ T7645] netlink: zone id is out of range
[   87.959857][ T7645] netlink: zone id is out of range
[   87.962022][ T7645] netlink: get zone limit has 8 unknown bytes
[   88.034508][ T7648] netlink: 'syz.3.577': attribute type 10 has an invalid length.
[   88.295291][ T7661] netlink: 'syz.3.583': attribute type 1 has an invalid length.
[   88.324397][ T7661] bond1: entered promiscuous mode
[   88.330285][ T7661] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.339722][ T7661] __nla_validate_parse: 7 callbacks suppressed
[   88.339731][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[   88.359729][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'.
[   88.488289][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[   88.503928][ T5236] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   88.508764][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[   88.525636][ T7672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.530021][ T7671] syzkaller0: entered promiscuous mode
[   88.535594][ T7671] syzkaller0: entered allmulticast mode
[   88.541326][ T7671] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[   88.547173][ T7671] netlink: 'syz.2.586': attribute type 6 has an invalid length.
[   88.550287][ T7671] netlink: 'syz.2.586': attribute type 3 has an invalid length.
[   88.560704][ T7671] tipc: Resetting bearer <eth:syzkaller0>
[   88.570141][ T7671] tipc: Disabling bearer <eth:syzkaller0>
[   89.792880][ T7720] lo speed is unknown, defaulting to 1000
[   89.812093][ T7722] netlink: 'syz.3.606': attribute type 21 has an invalid length.
[   89.818013][ T7722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.606'.
[   89.827436][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'.
[   89.831882][ T7722] erspan0: entered promiscuous mode
[   89.897792][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'.
[   90.204976][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'.
[   90.296673][ T7748] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[   90.381949][ T7769] netlink: 'syz.3.621': attribute type 10 has an invalid length.
[   91.284625][ T7808] syzkaller0: entered promiscuous mode
[   91.286506][ T7808] syzkaller0: entered allmulticast mode
[   91.556795][ T7821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.561314][ T7821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.590397][ T7817] netlink: 'syz.2.630': attribute type 8 has an invalid length.
[   91.594494][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[   91.624108][ T7821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.627493][ T7821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.693937][ T7821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.697478][ T7821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.747040][ T7821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.750567][ T7821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.830860][ T5693] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.835972][ T5693] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.853196][ T5907] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.856910][ T5907] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.865986][ T5693] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.869502][ T5693] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.874176][ T7828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.881909][ T7829] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.885730][ T5693] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.889427][ T5693] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.894679][ T7829] syzkaller0: entered promiscuous mode
[   91.898449][ T7829] syzkaller0: entered allmulticast mode
[   91.934989][ T7828] tipc: Resetting bearer <eth:syzkaller0>
[   91.941092][ T7827] tipc: Resetting bearer <eth:syzkaller0>
[   91.954107][ T7827] tipc: Disabling bearer <eth:syzkaller0>
[   92.152439][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'.
[   92.156152][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'.
[   92.195686][ T7841] bridge0: entered promiscuous mode
[   92.201080][ T7841] ip6gretap0: entered promiscuous mode
[   92.219319][ T7843] tun0: tun_chr_ioctl cmd 2147767520
[   92.667567][ T7866] netlink: 'syz.2.646': attribute type 4 has an invalid length.
[   92.828229][  T972] IPVS: starting estimator thread 0...
[   92.922615][ T7876] IPVS: using max 81 ests per chain, 194400 per kthread
[   92.964566][ T7891] vlan0: entered promiscuous mode
[   92.966742][ T7891] bridge0: entered promiscuous mode
[   92.977013][ T7893] bridge4: entered allmulticast mode
[   93.249774][ T7924] tun0: tun_chr_ioctl cmd 2147767520
[   93.458838][ T7939] __nla_validate_parse: 5 callbacks suppressed
[   93.458852][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'.
[   93.497923][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'.
[   93.500992][ T7935] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[   93.507903][ T7935] bond5: (slave vxcan5): Error -95 calling set_mac_address
[   93.537007][ T7942] wg2: entered promiscuous mode
[   93.541462][ T7942] wg2: entered allmulticast mode
[   93.550102][ T7939] macvlan2: entered promiscuous mode
[   93.556488][ T7939] macvlan2: entered allmulticast mode
[   93.559012][ T7939] bond5: (slave macvlan2): Error -98 calling set_mac_address
[   93.575731][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'.
[   93.595682][ T7935] netlink: 516 bytes leftover after parsing attributes in process `syz.0.672'.
[   94.565886][ T7960] netlink: 844 bytes leftover after parsing attributes in process `syz.2.680'.
[   94.623575][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   94.627208][ T7964] validate_nla: 2 callbacks suppressed
[   94.627216][ T7964] netlink: 'syz.0.681': attribute type 10 has an invalid length.
[   94.669036][ T7963] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   94.743816][ T7976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.687'.
[   94.773594][ T7981] netlink: 'syz.0.689': attribute type 10 has an invalid length.
[   94.928230][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[   94.939342][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'.
[   94.942222][ T7994] netlink: 'syz.0.692': attribute type 18 has an invalid length.
[   95.130378][ T8010] netlink: 3 bytes leftover after parsing attributes in process `syz.3.698'.
[   95.134775][ T8010] 0X: renamed from caif0
[   95.139142][ T8010] 0X: entered allmulticast mode
[   95.141047][ T8010] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   95.377294][ T8020] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.770652][ T8026] lo speed is unknown, defaulting to 1000
[   96.340346][ T8051] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[   96.355014][ T8051] bridge0: port 3(bond0) entered disabled state
[   96.361924][ T8051] bond0: (slave team0): Releasing backup interface
[   96.366498][ T8051] team0: left promiscuous mode
[   96.368650][ T8051] team_slave_0: left promiscuous mode
[   96.371092][ T8051] team_slave_1: left promiscuous mode
[   96.375258][ T8051] team0: left allmulticast mode
[   96.377393][ T8051] team_slave_0: left allmulticast mode
[   96.379746][ T8051] team_slave_1: left allmulticast mode
[   96.386231][ T8051] bridge_slave_0: left allmulticast mode
[   96.388676][ T8051] bridge_slave_0: left promiscuous mode
[   96.391289][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.400277][ T8051] bridge_slave_1: left allmulticast mode
[   96.402828][ T8051] bridge_slave_1: left promiscuous mode
[   96.405707][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.418862][ T8051] bond0: (slave bond_slave_0): Releasing backup interface
[   96.423526][ T8051] bond_slave_0: left promiscuous mode
[   96.426005][ T8051] bond_slave_0: left allmulticast mode
[   96.435647][ T8051] bond0: (slave bond_slave_1): Releasing backup interface
[   96.440145][ T8051] bond_slave_1: left promiscuous mode
[   96.444063][ T8051] bond_slave_1: left allmulticast mode
[   96.455397][ T8051] team0: Port device team_slave_0 removed
[   96.463559][ T8055] netlink: 'syz.3.711': attribute type 10 has an invalid length.
[   96.469187][ T8051] team0: Port device team_slave_1 removed
[   96.472187][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.477312][ T8051] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.482122][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.485473][ T8051] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.510356][ T8055] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[   96.529246][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.545449][ T8055] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[   96.548740][ T8055] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[   96.553712][ T8055] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   96.557765][ T8051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.560881][ T8051] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.937213][ T8061] tun0: tun_chr_ioctl cmd 2147767520
[   97.281123][ T8087] sit1: entered promiscuous mode
[   97.286483][ T8087] sit1: entered allmulticast mode
[   97.337375][ T8092] netlink: 'syz.3.726': attribute type 10 has an invalid length.
[   97.601515][ T8108] netlink: 'syz.3.734': attribute type 10 has an invalid length.
[   97.959858][ T8129] netlink: 'syz.3.741': attribute type 10 has an invalid length.
[   98.107613][ T8140] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.155169][ T8144] netlink: 'syz.3.748': attribute type 10 has an invalid length.
[   98.423239][ T8158] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   98.546592][ T8168] __nla_validate_parse: 4 callbacks suppressed
[   98.546601][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'.
[   98.592068][ T8174] geneve2: entered promiscuous mode
[   98.733670][ T8192] netlink: 'syz.3.768': attribute type 10 has an invalid length.
[   98.757769][ T8195] netlink: 14679 bytes leftover after parsing attributes in process `syz.0.769'.
[   98.771618][ T8195] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[   98.775256][ T8195] netlink: 144 bytes leftover after parsing attributes in process `syz.0.769'.
[   98.808222][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'.
[   98.871689][ T8205] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.889398][ T8205] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.892175][ T8205] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[   98.896746][ T8205] bond6: (slave vxcan5): Error -95 calling set_mac_address
[   98.941621][ T8210] veth5: entered promiscuous mode
[   98.948002][ T8210] bond6: (slave veth5): Enslaving as an active interface with a down link
[   98.953635][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'.
[   98.957867][ T8210] 8021q: adding VLAN 0 to HW filter on device bond6
[   99.425162][ T8249] batadv_slave_0: entered promiscuous mode
[   99.435344][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'.
[   99.474431][ T8249] netlink: 428 bytes leftover after parsing attributes in process `syz.0.787'.
[   99.660569][ T8259] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   99.959664][ T8272] validate_nla: 3 callbacks suppressed
[   99.959673][ T8272] netlink: 'syz.2.794': attribute type 4 has an invalid length.
[  100.163494][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'.
[  100.168709][ T8283] netlink: 'syz.3.799': attribute type 13 has an invalid length.
[  100.879356][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  101.132984][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'.
[  101.318494][ T8334] netlink: 'syz.3.819': attribute type 10 has an invalid length.
[  101.565488][ T8351] tun0: tun_chr_ioctl cmd 2147767520
[  102.491674][ T8369] netlink: 'syz.2.834': attribute type 18 has an invalid length.
[  102.707724][ T8383] netlink: 'syz.2.840': attribute type 10 has an invalid length.
[  102.710563][ T8383] !: entered promiscuous mode
[  102.713315][ T8383] bridge0: port 3(0!) entered blocking state
[  102.715605][ T8383] bridge0: port 3(0!) entered disabled state
[  102.717880][ T8383] !: entered allmulticast mode
[  102.721550][ T8383] bridge0: port 3(0!) entered blocking state
[  102.724135][ T8383] bridge0: port 3(0!) entered listening state
[  102.812146][ T8389] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  102.938092][ T8399] netlink: 'syz.2.846': attribute type 10 has an invalid length.
[  102.981901][ T8402] netlink: 'syz.2.847': attribute type 10 has an invalid length.
[  103.128577][ T8415] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  103.211008][ T8423] tun0: tun_chr_ioctl cmd 2147767520
[  103.699774][ T8469] netlink: 'syz.2.872': attribute type 1 has an invalid length.
[  103.710038][ T8469] __nla_validate_parse: 15 callbacks suppressed
[  103.710052][ T8469] netlink: 216 bytes leftover after parsing attributes in process `syz.2.872'.
[  103.867022][ T8477] pim6reg1: entered promiscuous mode
[  103.869012][ T8477] pim6reg1: entered allmulticast mode
[  104.017770][ T8483] openvswitch: netlink: Missing valid actions attribute.
[  104.020888][ T8483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.678107][ T8493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.681977][ T8493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.755430][ T8493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.758748][ T8493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.827332][ T8493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.831319][ T8493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.896921][ T8493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.901051][ T8493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.974512][ T8496] netlink: 'syz.3.882': attribute type 10 has an invalid length.
[  105.046525][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.049589][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.062607][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.065960][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.069337][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.083752][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.086974][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.089880][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.121992][ T8505] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  105.168428][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.170832][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.174344][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.176759][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.179895][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.186293][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.191497][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.195076][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.199434][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.203161][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.207813][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.211414][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.217231][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.217439][ T8512] netlink: 'syz.3.887': attribute type 11 has an invalid length.
[  105.220520][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.228662][ T8511] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  105.231997][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.237868][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  105.947018][ T8546] tun0: tun_chr_ioctl cmd 2147767520
[  105.949147][ T8547] tun0: tun_chr_ioctl cmd 2147767520
[  107.262690][ T8629] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  107.809124][ T8656] team0: Port device dummy0 added
[  107.831979][ T8656] team0: Port device dummy0 removed
[  108.637211][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv1
[  108.640709][ T8668] team0: Failed to send options change via netlink (err -105)
[  108.645178][ T8668] team0: Port device batadv1 added
[  108.841989][ T8677] __nla_validate_parse: 93 callbacks suppressed
[  108.841998][ T8677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.943'.
[  109.225559][ T8685] vxcan2: entered promiscuous mode
[  109.230902][ T8687] veth0: entered promiscuous mode
[  109.338869][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'.
[  109.748316][ T8702] syzkaller1: entered promiscuous mode
[  109.750147][ T8702] syzkaller1: entered allmulticast mode
[  110.055881][ T8686] veth0: left promiscuous mode
[  110.110194][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[  110.400041][ T8726] syzkaller0: entered promiscuous mode
[  110.401923][ T8726] syzkaller0: entered allmulticast mode
[  110.429314][ T8730] 8021q: adding VLAN 0 to HW filter on device bond4
[  111.289958][ T8730] bond_slave_0: entered promiscuous mode
[  111.292012][ T8730] bond_slave_1: entered promiscuous mode
[  111.294784][ T8730] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.299319][ T8730] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[  111.309286][ T8732] bond0: (slave team0): Releasing backup interface
[  111.312086][ T8732] !: left allmulticast mode
[  111.314073][ T8732] bridge0: port 3(0!) entered disabled state
[  111.318802][ T8732] bridge_slave_0: left allmulticast mode
[  111.320581][ T8732] bridge_slave_0: left promiscuous mode
[  111.324323][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.328650][ T8732] bridge_slave_1: left allmulticast mode
[  111.330602][ T8732] bridge_slave_1: left promiscuous mode
[  111.334300][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.342336][ T8732] bond0: (slave bond_slave_0): Releasing backup interface
[  111.350451][ T8732] bond_slave_0: left promiscuous mode
[  111.357570][ T8732] bond0: (slave bond_slave_1): Releasing backup interface
[  111.361144][ T8732] bond_slave_1: left promiscuous mode
[  111.369396][ T8732] team0: Port device team_slave_0 removed
[  111.376762][ T8736] validate_nla: 93 callbacks suppressed
[  111.376770][ T8736] netlink: 'syz.0.964': attribute type 3 has an invalid length.
[  111.377889][ T8732] team0: Port device team_slave_1 removed
[  111.379041][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'.
[  111.381835][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.391641][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.396821][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.400049][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.409756][ T8732] bond2: (slave veth3): Releasing backup interface
[  111.415613][ T8732] bond4: (slave macvlan2): Removing an active aggregator
[  111.418913][ T8732] bond4: (slave macvlan2): Releasing backup interface
[  111.526389][ T8751] netlink: 120 bytes leftover after parsing attributes in process `syz.3.968'.
[  111.529884][ T8751] netlink: 'syz.3.968': attribute type 1 has an invalid length.
[  111.620464][ T8761] netlink: 'syz.3.968': attribute type 1 has an invalid length.
[  111.628839][ T8761] netlink: 208 bytes leftover after parsing attributes in process `syz.3.968'.
[  111.727820][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'.
[  111.967558][ T8793] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  112.067498][ T8803] netlink: 256 bytes leftover after parsing attributes in process `syz.2.989'.
[  112.083015][ T8804] netlink: 'syz.3.987': attribute type 12 has an invalid length.
[  112.085644][ T8804] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.987'.
[  112.138277][ T8808] macsec1: entered promiscuous mode
[  112.140072][ T8808] team0: entered promiscuous mode
[  112.326509][ T8817] netlink: 'syz.2.994': attribute type 10 has an invalid length.
[  112.707269][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'.
[  113.143060][ T8857] netlink: 'syz.0.1008': attribute type 303 has an invalid length.
[  113.161634][ T8867] 0: renamed from hsr0 (while UP)
[  113.166900][ T8867] 0: entered allmulticast mode
[  113.168959][ T8867] hsr_slave_0: entered allmulticast mode
[  113.171115][ T8867] hsr_slave_1: entered allmulticast mode
[  113.182505][ T8867] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  113.205511][ T8869] netlink: 'syz.0.1012': attribute type 1 has an invalid length.
[  113.225037][ T8869] 8021q: adding VLAN 0 to HW filter on device bond7
[  113.242072][ T8869] 8021q: adding VLAN 0 to HW filter on device bond7
[  113.246338][ T8869] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  113.250888][ T8869] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  113.275920][ T8874] netlink: 'syz.2.1014': attribute type 10 has an invalid length.
[  113.297385][ T8875] bond7: (slave bridge3): Enslaving as an active interface with a down link
[  114.389876][ T8898] __nla_validate_parse: 3 callbacks suppressed
[  114.389885][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'.
[  114.496916][ T8922] netlink: 'syz.2.1023': attribute type 10 has an invalid length.
[  114.630386][ T8936] tun0: tun_chr_ioctl cmd 2147767520
[  114.637253][ T8935] tun0: tun_chr_ioctl cmd 2147767520
[  114.645236][ T8934] tun0: tun_chr_ioctl cmd 1074025673
[  114.802243][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'.
[  115.266614][ T8968] netlink: 'syz.3.1037': attribute type 1 has an invalid length.
[  115.269092][ T8968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1037'.
[  115.287189][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'.
[  115.301464][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'.
[  115.347767][ T8970] tun0: tun_chr_ioctl cmd 2147767520
[  115.460072][ T8973] vlan2: entered promiscuous mode
[  116.400546][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'.
[  116.413826][ T9002] validate_nla: 1 callbacks suppressed
[  116.413838][ T9002] netlink: 'syz.3.1051': attribute type 1 has an invalid length.
[  116.581810][ T9012] vlan0: entered promiscuous mode
[  116.682237][ T9023] netlink: 'syz.3.1056': attribute type 10 has an invalid length.
[  116.748575][ T5693] nci: nci_rsp_packet: unknown rsp opcode 0x218
[  116.754571][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'.
[  116.950472][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'.
[  117.528055][ T9036] netlink: 'syz.2.1059': attribute type 1 has an invalid length.
[  117.554406][ T9036] 8021q: adding VLAN 0 to HW filter on device bond6
[  117.575953][ T9036] bond6: (slave ip6gretap1): making interface the new active one
[  117.580190][ T9036] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  117.605654][ T9036] veth5: entered promiscuous mode
[  117.611736][ T9036] bond6: (slave veth5): Enslaving as an active interface with a down link
[  117.636410][ T9036] erspan0: entered allmulticast mode
[  117.646191][ T9036] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  117.748638][ T9047] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1065'.
[  117.787713][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'.
[  117.790943][ T9059] netlink: 'syz.2.1068': attribute type 7 has an invalid length.
[  117.805638][ T9059] netlink: 'syz.2.1068': attribute type 8 has an invalid length.
[  117.829698][ T9059] gretap0: entered promiscuous mode
[  117.832043][ T9059] batadv_slave_1: entered promiscuous mode
[  117.835213][ T9059] erspan0: entered promiscuous mode
[  117.837700][ T9059] erspan0: left promiscuous mode
[  117.840082][ T9059] gretap0: left promiscuous mode
[  117.845088][ T9059] batadv_slave_1: left promiscuous mode
[  117.856657][ T9067] tun0: tun_chr_ioctl cmd 2147767520
[  118.001014][ T9081] lo speed is unknown, defaulting to 1000
[  118.138308][ T9093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.141125][ T9093] syzkaller0: entered promiscuous mode
[  118.145080][ T9093] syzkaller0: entered allmulticast mode
[  118.182791][ T9091] tipc: Resetting bearer <eth:syzkaller0>
[  118.206568][ T9091] tipc: Disabling bearer <eth:syzkaller0>
[  118.320600][ T9110] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  118.323977][ T9110] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  118.357303][ T9112] tun0: tun_chr_ioctl cmd 2147767520
[  118.615048][ T9137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.770042][ T9203] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  119.792734][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  119.834556][ T9210] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  119.897413][ T9222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.990279][ T9231] __nla_validate_parse: 6 callbacks suppressed
[  119.990288][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'.
[  119.997707][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'.
[  120.051013][ T9239] netlink: 'syz.3.1123': attribute type 10 has an invalid length.
[  120.109092][ T9244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1125'.
[  120.121052][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1124'.
[  120.121647][ T9244] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  120.180765][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'.
[  120.235346][ T9255] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1129'.
[  120.320685][    C1] ==================================================================
[  120.324048][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  120.327379][    C1] Write of size 8 at addr ffff888031fe4030 by task modprobe/9260
[  120.331482][    C1] 
[  120.332523][ T9262] tun0: tun_chr_ioctl cmd 2147767520
[  120.332527][    C1] CPU: 1 UID: 0 PID: 9260 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  120.332543][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.332549][    C1] Call Trace:
[  120.332555][    C1]  <IRQ>
[  120.332561][    C1]  dump_stack_lvl+0x189/0x250
[  120.332577][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  120.332592][    C1]  ? rcu_is_watching+0x15/0xb0
[  120.332603][    C1]  ? __kasan_check_byte+0x12/0x40
[  120.332619][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.332631][    C1]  ? rcu_is_watching+0x15/0xb0
[  120.332641][    C1]  ? lock_release+0x4b/0x3e0
[  120.332682][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  120.332695][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  120.332708][    C1]  print_report+0xca/0x240
[  120.332720][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  120.332731][    C1]  kasan_report+0x118/0x150
[  120.332746][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  120.332758][    C1]  __xfrm_state_delete+0x696/0xca0
[  120.332771][    C1]  xfrm_timer_handler+0x18f/0xa00
[  120.332790][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  120.332804][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  120.332819][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.332835][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.332849][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.332864][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  120.332880][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  120.332895][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  120.332912][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  120.332922][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  120.332936][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  120.332948][    C1]  handle_softirqs+0x286/0x870
[  120.332959][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  120.332971][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  120.332984][    C1]  __irq_exit_rcu+0xca/0x1f0
[  120.332994][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  120.333007][    C1]  irq_exit_rcu+0x9/0x30
[  120.333017][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  120.333032][    C1]  </IRQ>
[  120.333036][    C1]  <TASK>
[  120.333040][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  120.333053][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  120.333069][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 24 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  120.333078][    C1] RSP: 0018:ffffc90002aef1d8 EFLAGS: 00000206
[  120.333090][    C1] RAX: 8604eb18669fe600 RBX: 0000000000000000 RCX: 8604eb18669fe600
[  120.333098][    C1] RDX: 0000000000000000 RSI: ffffffff8dba751f RDI: ffffffff8be33800
[  120.333105][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195
[  120.333113][    C1] R10: ffffc90002aef398 R11: ffffffff81ac3820 R12: 0000000000000002
[  120.333119][    C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246
[  120.333128][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.333141][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  120.333154][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.333169][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.333181][    C1]  ? kasan_save_track+0x3e/0x80
[  120.333193][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.333205][    C1]  unwind_next_frame+0xc2/0x2390
[  120.333223][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.333236][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.333247][    C1]  ? stack_trace_save+0x9c/0xe0
[  120.333261][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  120.333274][    C1]  arch_stack_walk+0x11c/0x150
[  120.333288][    C1]  ? kasan_save_track+0x3e/0x80
[  120.333302][    C1]  stack_trace_save+0x9c/0xe0
[  120.333315][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  120.333328][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  120.333342][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.333357][    C1]  kasan_save_track+0x3e/0x80
[  120.333367][    C1]  ? kasan_save_track+0x3e/0x80
[  120.333389][    C1]  __kasan_slab_alloc+0x6c/0x80
[  120.333403][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  120.333418][    C1]  ? vm_area_alloc+0x24/0x140
[  120.333432][    C1]  vm_area_alloc+0x24/0x140
[  120.333447][    C1]  mmap_region+0xdc7/0x20c0
[  120.333464][    C1]  ? __pfx_mmap_region+0x10/0x10
[  120.333476][    C1]  ? unmapped_area_topdown+0x571/0x590
[  120.333505][    C1]  ? mm_get_unmapped_area_vmflags+0xb3/0xe0
[  120.333524][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  120.333536][    C1]  ? security_mmap_addr+0x71/0x270
[  120.333552][    C1]  ? shmem_mapping+0xd/0x50
[  120.333563][    C1]  ? memfd_check_seals_mmap+0xc5/0x200
[  120.333576][    C1]  do_mmap+0xc45/0x10d0
[  120.333592][    C1]  ? __pfx_do_mmap+0x10/0x10
[  120.333603][    C1]  ? down_write_killable+0x178/0x230
[  120.333614][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  120.333624][    C1]  ? common_file_perm+0x1b5/0x230
[  120.333634][    C1]  vm_mmap_pgoff+0x2a6/0x4d0
[  120.333648][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  120.333687][    C1]  ? __fget_files+0x2a/0x420
[  120.333704][    C1]  ? __fget_files+0x3a0/0x420
[  120.333718][    C1]  ? __fget_files+0x2a/0x420
[  120.333732][    C1]  ksys_mmap_pgoff+0x51f/0x760
[  120.333747][    C1]  do_syscall_64+0xfa/0x3b0
[  120.333756][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.333771][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.333781][    C1]  ? exc_page_fault+0x9f/0xf0
[  120.333794][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.333803][    C1] RIP: 0033:0x7fed2ab44b74
[  120.333812][    C1] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f
[  120.333821][    C1] RSP: 002b:00007ffd92064588 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  120.333832][    C1] RAX: ffffffffffffffda RBX: 00000fffb240c8b2 RCX: 00007fed2ab44b74
[  120.333840][    C1] RDX: 0000000000000001 RSI: 0000000000054188 RDI: 0000000000000000
[  120.333847][    C1] RBP: 00007ffd92064920 R08: 0000000000000000 R09: 0000000000000000
[  120.333854][    C1] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fed2ab204b0
[  120.333861][    C1] R13: 00007ffd920649a8 R14: fffffffffffff000 R15: 0000000000000000
[  120.333872][    C1]  </TASK>
[  120.333875][    C1] 
[  120.582767][    C1] Allocated by task 7720:
[  120.584618][    C1]  kasan_save_track+0x3e/0x80
[  120.586613][    C1]  __kasan_slab_alloc+0x6c/0x80
[  120.588708][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  120.590994][    C1]  xfrm_state_alloc+0x24/0x2f0
[  120.593052][    C1]  __find_acq_core+0x8a7/0x1c00
[  120.595120][    C1]  xfrm_find_acq+0x78/0xa0
[  120.597163][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  120.599390][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  120.601517][    C1]  netlink_rcv_skb+0x208/0x470
[  120.603589][    C1]  xfrm_netlink_rcv+0x79/0x90
[  120.605606][    C1]  netlink_unicast+0x82f/0x9e0
[  120.607702][    C1]  netlink_sendmsg+0x805/0xb30
[  120.609823][    C1]  __sock_sendmsg+0x21c/0x270
[  120.611895][    C1]  ____sys_sendmsg+0x505/0x830
[  120.613917][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  120.615930][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  120.618040][    C1]  do_syscall_64+0xfa/0x3b0
[  120.620014][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.622526][    C1] 
[  120.623575][    C1] Freed by task 5880:
[  120.625276][    C1]  kasan_save_track+0x3e/0x80
[  120.627312][    C1]  kasan_save_free_info+0x46/0x50
[  120.629439][    C1]  __kasan_slab_free+0x5b/0x80
[  120.631495][    C1]  kmem_cache_free+0x18f/0x400
[  120.633510][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  120.635597][    C1]  process_scheduled_works+0xae1/0x17b0
[  120.637945][    C1]  worker_thread+0x8a0/0xda0
[  120.639885][    C1]  kthread+0x711/0x8a0
[  120.641608][    C1]  ret_from_fork+0x3fc/0x770
[  120.643554][    C1]  ret_from_fork_asm+0x1a/0x30
[  120.645559][    C1] 
[  120.646601][    C1] The buggy address belongs to the object at ffff888031fe4000
[  120.646601][    C1]  which belongs to the cache xfrm_state of size 928
[  120.652194][    C1] The buggy address is located 48 bytes inside of
[  120.652194][    C1]  freed 928-byte region [ffff888031fe4000, ffff888031fe43a0)
[  120.657836][    C1] 
[  120.658889][    C1] The buggy address belongs to the physical page:
[  120.661688][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31fe4
[  120.665394][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  120.668935][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  120.672046][    C1] page_type: f5(slab)
[  120.673724][    C1] raw: 00fff00000000040 ffff8881053f03c0 dead000000000122 0000000000000000
[  120.677293][    C1] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  120.680786][    C1] head: 00fff00000000040 ffff8881053f03c0 dead000000000122 0000000000000000
[  120.684324][    C1] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  120.687962][    C1] head: 00fff00000000002 ffffea0000c7f901 00000000ffffffff 00000000ffffffff
[  120.691680][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  120.695348][    C1] page dumped because: kasan: bad access detected
[  120.697988][    C1] page_owner tracks the page as allocated
[  120.700372][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7720, tgid 7719 (syz.2.605), ts 89767971630, free_ts 89749431624
[  120.707990][    C1]  post_alloc_hook+0x240/0x2a0
[  120.710004][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  120.712273][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  120.714702][    C1]  alloc_pages_mpol+0x232/0x4a0
[  120.716792][    C1]  allocate_slab+0x8a/0x370
[  120.718708][    C1]  ___slab_alloc+0xbeb/0x1410
[  120.720685][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  120.722882][    C1]  xfrm_state_alloc+0x24/0x2f0
[  120.724857][    C1]  __find_acq_core+0x8a7/0x1c00
[  120.726907][    C1]  xfrm_find_acq+0x78/0xa0
[  120.728752][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  120.730824][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  120.732908][    C1]  netlink_rcv_skb+0x208/0x470
[  120.734878][    C1]  xfrm_netlink_rcv+0x79/0x90
[  120.736812][    C1]  netlink_unicast+0x82f/0x9e0
[  120.738832][    C1]  netlink_sendmsg+0x805/0xb30
[  120.740857][    C1] page last free pid 5295 tgid 5295 stack trace:
[  120.743547][    C1]  __free_frozen_pages+0xbc4/0xd30
[  120.745797][    C1]  __put_partials+0x156/0x1a0
[  120.747823][    C1]  put_cpu_partial+0x17c/0x250
[  120.749909][    C1]  __slab_free+0x2d5/0x3c0
[  120.751847][    C1]  qlist_free_all+0x97/0x140
[  120.753854][    C1]  kasan_quarantine_reduce+0x148/0x160
[  120.756254][    C1]  __kasan_slab_alloc+0x22/0x80
[  120.758402][    C1]  __kvmalloc_node_noprof+0x2b0/0x5f0
[  120.760829][    C1]  seq_read_iter+0x1fd/0xe10
[  120.762860][    C1]  vfs_read+0x55a/0xa30
[  120.764602][    C1]  ksys_read+0x145/0x250
[  120.766458][    C1]  do_syscall_64+0xfa/0x3b0
[  120.768395][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.770929][    C1] 
[  120.771960][    C1] Memory state around the buggy address:
[  120.774346][    C1]  ffff888031fe3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  120.777773][    C1]  ffff888031fe3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  120.781199][    C1] >ffff888031fe4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.784564][    C1]                                      ^
[  120.786961][    C1]  ffff888031fe4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.790350][    C1]  ffff888031fe4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.793734][    C1] ==================================================================
[  120.797539][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  120.800634][    C1] CPU: 1 UID: 0 PID: 9260 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  120.804453][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.808752][    C1] Call Trace:
[  120.810199][    C1]  <IRQ>
[  120.811453][    C1]  dump_stack_lvl+0x99/0x250
[  120.813480][    C1]  ? __asan_memcpy+0x40/0x70
[  120.815486][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.817727][    C1]  ? __pfx__printk+0x10/0x10
[  120.819758][    C1]  vpanic+0x281/0x750
[  120.821472][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  120.823677][    C1]  ? __pfx_vpanic+0x10/0x10
[  120.825629][    C1]  ? irqentry_exit+0x74/0x90
[  120.827629][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.829883][    C1]  panic+0xb9/0xc0
[  120.831528][    C1]  ? __pfx_panic+0x10/0x10
[  120.833431][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  120.835975][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.838751][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  120.841059][    C1]  check_panic_on_warn+0x89/0xb0
[  120.843184][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  120.845373][    C1]  end_report+0x78/0x160
[  120.847170][    C1]  kasan_report+0x129/0x150
[  120.849121][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  120.851324][    C1]  __xfrm_state_delete+0x696/0xca0
[  120.853431][    C1]  xfrm_timer_handler+0x18f/0xa00
[  120.855526][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  120.857894][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  120.860399][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.862568][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.865085][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.867758][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  120.870068][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  120.872373][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  120.874510][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  120.876818][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  120.879184][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  120.881285][    C1]  handle_softirqs+0x286/0x870
[  120.883252][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  120.885209][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  120.887385][    C1]  __irq_exit_rcu+0xca/0x1f0
[  120.889275][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  120.891409][    C1]  irq_exit_rcu+0x9/0x30
[  120.893162][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  120.895433][    C1]  </IRQ>
[  120.896670][    C1]  <TASK>
[  120.897927][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  120.900359][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  120.902509][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 24 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  120.910257][    C1] RSP: 0018:ffffc90002aef1d8 EFLAGS: 00000206
[  120.912708][    C1] RAX: 8604eb18669fe600 RBX: 0000000000000000 RCX: 8604eb18669fe600
[  120.915889][    C1] RDX: 0000000000000000 RSI: ffffffff8dba751f RDI: ffffffff8be33800
[  120.919097][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195
[  120.922238][    C1] R10: ffffc90002aef398 R11: ffffffff81ac3820 R12: 0000000000000002
[  120.925440][    C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246
[  120.928674][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.930777][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  120.933322][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.935464][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.937609][    C1]  ? kasan_save_track+0x3e/0x80
[  120.939679][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.941791][    C1]  unwind_next_frame+0xc2/0x2390
[  120.943836][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.945957][    C1]  ? unwind_next_frame+0xa5/0x2390
[  120.948039][    C1]  ? stack_trace_save+0x9c/0xe0
[  120.950075][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  120.952567][    C1]  arch_stack_walk+0x11c/0x150
[  120.954538][    C1]  ? kasan_save_track+0x3e/0x80
[  120.956558][    C1]  stack_trace_save+0x9c/0xe0
[  120.958516][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  120.960795][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  120.963236][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.965382][    C1]  kasan_save_track+0x3e/0x80
[  120.967366][    C1]  ? kasan_save_track+0x3e/0x80
[  120.969383][    C1]  __kasan_slab_alloc+0x6c/0x80
[  120.971437][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  120.973707][    C1]  ? vm_area_alloc+0x24/0x140
[  120.975642][    C1]  vm_area_alloc+0x24/0x140
[  120.977535][    C1]  mmap_region+0xdc7/0x20c0
[  120.979467][    C1]  ? __pfx_mmap_region+0x10/0x10
[  120.981490][    C1]  ? unmapped_area_topdown+0x571/0x590
[  120.983766][    C1]  ? mm_get_unmapped_area_vmflags+0xb3/0xe0
[  120.986274][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  120.988290][    C1]  ? security_mmap_addr+0x71/0x270
[  120.990386][    C1]  ? shmem_mapping+0xd/0x50
[  120.992240][    C1]  ? memfd_check_seals_mmap+0xc5/0x200
[  120.994512][    C1]  do_mmap+0xc45/0x10d0
[  120.996354][    C1]  ? __pfx_do_mmap+0x10/0x10
[  120.998304][    C1]  ? down_write_killable+0x178/0x230
[  121.000470][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  121.002829][    C1]  ? common_file_perm+0x1b5/0x230
[  121.004878][    C1]  vm_mmap_pgoff+0x2a6/0x4d0
[  121.006768][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  121.008876][    C1]  ? __fget_files+0x2a/0x420
[  121.010785][    C1]  ? __fget_files+0x3a0/0x420
[  121.012752][    C1]  ? __fget_files+0x2a/0x420
[  121.014612][    C1]  ksys_mmap_pgoff+0x51f/0x760
[  121.016575][    C1]  do_syscall_64+0xfa/0x3b0
[  121.018477][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.020676][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.023172][    C1]  ? exc_page_fault+0x9f/0xf0
[  121.025173][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.027708][    C1] RIP: 0033:0x7fed2ab44b74
[  121.029591][    C1] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f
[  121.037609][    C1] RSP: 002b:00007ffd92064588 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  121.041054][    C1] RAX: ffffffffffffffda RBX: 00000fffb240c8b2 RCX: 00007fed2ab44b74
[  121.044248][    C1] RDX: 0000000000000001 RSI: 0000000000054188 RDI: 0000000000000000
[  121.047411][    C1] RBP: 00007ffd92064920 R08: 0000000000000000 R09: 0000000000000000
[  121.050671][    C1] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fed2ab204b0
[  121.053911][    C1] R13: 00007ffd920649a8 R14: fffffffffffff000 R15: 0000000000000000
[  121.057190][    C1]  </TASK>
[  121.059343][    C1] Kernel Offset: disabled
[  121.061117][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:39:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000010 RBX=00007f4e153c5fa0 RCX=00007f4e1518ebe9 RDX=0000200000000000
RSI=00000000400454ca RDI=0000000000000004 RBP=00007f4e15211e19 RSP=0000000031a76000
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246
R12=0000000000000000 R13=00007f4e153c6038 R14=00007f4e153c5fa0 R15=00007fff78566678
RIP=ffffffff810000a3 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4e15f996c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3328d3 CR3=0000000031a76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4e15397498 00007f4e15397470 XMM03=00007f4e153974a8 00007f4e153974a0
XMM04=00007f4e15efd100 00007f4e15397460 XMM05=00007f4e15397478 00007f4e153974c0
XMM06=00007f4e153974b8 00007f4e153974b0 XMM07=00007f4e153974a8 00007f4e153974a0
XMM08=7266e401e34dd833 a240364614ce968a XMM09=0000000000000000 00007f4e15212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888020438237 R9 =1ffff11004087046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8fc R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed2a895ba8 CR3=0000000030d48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
