last executing test programs:

3.676758935s ago: executing program 0 (id=59):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0)

3.553311872s ago: executing program 0 (id=62):
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x8407, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0xffffffffffffffff}, 0x50)

3.460841496s ago: executing program 0 (id=64):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000aaaaaaaaaaaaaaaaaaaaaa2d86dd6d0020088080000020010000000000000000000000000001ff6a000001d1a808125085d8e58750ae2f2425"], 0x46)

3.36836383s ago: executing program 1 (id=65):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)

3.306361802s ago: executing program 0 (id=67):
r0 = socket$igmp(0x2, 0x3, 0x2)
close(0x3)
socket$inet6_sctp(0xa, 0x801, 0x84)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="9a3b04fb77a48c8cca528c96c0b3433d102f218713a3fd7739ff2cf238d4a7e5afb9f4b2c59c85076b2d8421d5743146190f582867723d071495b3768425ff2eff070e992d0cb3c337bfc0b7441db60acd891cd4e4def9c6feeb92fbf048186d18d2db414a12902306b3ffed28ca26b22fb0fddbd752a10c8859de187365f87fbff141fb6132e7f2db8106cade2def7d50eb73bb205513c033cf59bc220147e1be4a82", 0x8a}, {&(0x7f0000000680)="7c7c7085c2a140a050ea6ba6a0ab9f7ea53a1eecb51b4be04e2bb9398698968cf4f2a9675b7a391e010b38a6ef0900babc530819dc2427eb07597047533f70691375b5c93933351be65e076dd26cb5a90d5ab04aee8fee32b576d029dd97884ec197cb7b000f6e9044d4654698db1b1f98f6964f28ad4b446a1267d4b56275da0d61fa326c933e786b8fbbdfd979d305731ae4b00f8c127325dee9", 0x9b}, {&(0x7f0000000080)="4014fd4507fcb82f0c1276796888dd09fa8c4fa1d68a6f88d156f4244dea14a29df1a7f908972ca8b5dba866610eba6ec3b270bd40266fb5", 0xffffff69}, {&(0x7f0000000780)="1491287d811d2151efeffc74b99832afd897c16ffabc5514f2175c55e522cda95d220d4072726301edbcb8e7ba96902dfe14fd99785e7b1397654f355dbb3e09c5049835e305d0876f9a06d1a651300cf2658c998d30a4449bd098ba6b8da3d4a52789e7023aa57e59e1cd9094ae082bbf2e03096eb60570c018d13643938b324de7a515e9cde26c17ad4c386ac0914d0f8e85daf624", 0x96}], 0x4)

3.29900563s ago: executing program 1 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

3.181093293s ago: executing program 0 (id=70):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r3, &(0x7f0000000280)=ANY=[], 0x48)

3.095695257s ago: executing program 1 (id=71):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.053203942s ago: executing program 1 (id=73):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)}, {&(0x7f0000000180)="a29633dc9c8df5ad204e39b66d76fd301414ed", 0x13}], 0x2}, 0x40040)

2.961052558s ago: executing program 1 (id=74):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f00000000c0))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600000085000000720000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r0, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e23, 0x81, @mcast2, 0x2}, {0xa, 0x4e20, 0x80000000, @remote, 0x4}, 0x0, {[0x1000, 0x7, 0x4, 0x2, 0x1, 0x5, 0x1, 0xfffffff8]}}, 0x5c)

2.801626948s ago: executing program 2 (id=78):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0)

2.712511392s ago: executing program 2 (id=79):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb)

2.712060395s ago: executing program 2 (id=80):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.632232583s ago: executing program 2 (id=81):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080)

119.156105ms ago: executing program 2 (id=82):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0)

116.407897ms ago: executing program 1 (id=83):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)

30.085973ms ago: executing program 2 (id=84):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x20}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r5 = accept4(r1, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040))
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

0s ago: executing program 0 (id=85):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30419' (ED25519) to the list of known hosts.
syzkaller login: [   55.737750][ T5525] cgroup: Unknown subsys name 'net'
[   55.846279][ T5525] cgroup: Unknown subsys name 'cpuset'
[   55.850128][ T5525] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.111400][ T5525] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.992697][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.002549][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.005187][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.009637][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.012451][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.051262][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.063032][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.067293][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.071998][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.075192][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.105611][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.110459][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.113980][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.117691][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.127844][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.846811][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.850083][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.852647][ T5629] bridge_slave_0: entered allmulticast mode
[   69.856079][ T5629] bridge_slave_0: entered promiscuous mode
[   69.881076][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.883196][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.885543][ T5629] bridge_slave_1: entered allmulticast mode
[   69.888116][ T5629] bridge_slave_1: entered promiscuous mode
[   69.944904][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.969834][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.990283][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.993701][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.996347][ T5632] bridge_slave_0: entered allmulticast mode
[   69.999955][ T5632] bridge_slave_0: entered promiscuous mode
[   70.015199][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.020210][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.024057][ T5636] bridge_slave_0: entered allmulticast mode
[   70.027589][ T5636] bridge_slave_0: entered promiscuous mode
[   70.031044][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.033333][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.036284][ T5636] bridge_slave_1: entered allmulticast mode
[   70.038849][ T5636] bridge_slave_1: entered promiscuous mode
[   70.041351][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.043669][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.045839][ T5632] bridge_slave_1: entered allmulticast mode
[   70.049211][ T5632] bridge_slave_1: entered promiscuous mode
[   70.053903][ T5629] team0: Port device team_slave_0 added
[   70.058402][ T5629] team0: Port device team_slave_1 added
[   70.094107][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.118238][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.122808][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.126475][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.128488][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.135240][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.159142][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.162097][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.164256][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.171845][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.176631][ T5636] team0: Port device team_slave_0 added
[   70.180774][ T5636] team0: Port device team_slave_1 added
[   70.222979][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.225554][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.234247][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.239888][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.242354][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.251168][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.260144][ T5632] team0: Port device team_slave_0 added
[   70.285530][ T5632] team0: Port device team_slave_1 added
[   70.293986][ T5629] hsr_slave_0: entered promiscuous mode
[   70.296785][ T5629] hsr_slave_1: entered promiscuous mode
[   70.340693][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.342626][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.350232][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.355878][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.358289][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.366760][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.383074][ T5636] hsr_slave_0: entered promiscuous mode
[   70.385540][ T5636] hsr_slave_1: entered promiscuous mode
[   70.387603][ T5636] debugfs: 'hsr0' already exists in 'hsr'
[   70.389304][ T5636] Cannot create hsr debugfs directory
[   70.481718][ T5632] hsr_slave_0: entered promiscuous mode
[   70.484787][ T5632] hsr_slave_1: entered promiscuous mode
[   70.488899][ T5632] debugfs: 'hsr0' already exists in 'hsr'
[   70.491036][ T5632] Cannot create hsr debugfs directory
[   70.747009][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.759357][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.762699][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.770891][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.775104][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.781355][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.787351][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.795322][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.872298][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.885940][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.898933][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.905331][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.909916][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.916756][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.935747][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.940450][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.008720][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.017809][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.025788][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.029077][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.034181][ T5631] Bluetooth: hci0: command tx timeout
[   71.035491][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.044245][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.049595][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.053370][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.058997][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.082231][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   71.102768][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.105434][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.114080][ T5631] Bluetooth: hci1: command tx timeout
[   71.130504][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.132979][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.193793][ T5631] Bluetooth: hci2: command tx timeout
[   71.207793][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.268286][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[   71.281042][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.293365][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.295756][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.321781][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.324584][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.353374][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[   71.382108][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.384712][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.412596][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.415299][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.728952][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.835546][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.852408][ T5629] veth0_vlan: entered promiscuous mode
[   71.871056][ T5629] veth1_vlan: entered promiscuous mode
[   71.927371][ T5632] veth0_vlan: entered promiscuous mode
[   71.950991][ T5632] veth1_vlan: entered promiscuous mode
[   71.957015][ T5629] veth0_macvtap: entered promiscuous mode
[   71.972546][ T5629] veth1_macvtap: entered promiscuous mode
[   72.003206][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.031679][ T5632] veth0_macvtap: entered promiscuous mode
[   72.037656][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.050449][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.055083][ T5632] veth1_macvtap: entered promiscuous mode
[   72.073167][ T5628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.079396][ T5628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.090336][ T5628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.096132][ T5628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.130330][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.161926][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.175289][ T5636] veth0_vlan: entered promiscuous mode
[   72.207690][ T5628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.216570][ T5628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.219480][ T5628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.232535][ T5628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.240703][ T5636] veth1_vlan: entered promiscuous mode
[   72.274972][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.280236][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.328287][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.331735][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.374087][ T5636] veth0_macvtap: entered promiscuous mode
[   72.391949][ T5636] veth1_macvtap: entered promiscuous mode
[   72.408165][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.419489][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.443312][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.455318][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.485008][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.488174][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.491325][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.512974][ T5662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.520889][ T5662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.536504][ T5662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.550322][ T5662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.653980][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.660552][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.743985][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.751152][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.092664][ T5758] netlink: 'syz.1.25': attribute type 21 has an invalid length.
[   73.124244][ T5631] Bluetooth: hci0: command tx timeout
[   73.205088][ T5631] Bluetooth: hci1: command tx timeout
[   73.244580][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   73.284399][ T5631] Bluetooth: hci2: command tx timeout
[   74.073906][ T5804] xt_hashlimit: overflow, try lower: 6/0
[   74.221764][ T5810] vlan0: entered promiscuous mode
[   74.407731][ T5822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.56'.
[   74.642332][ T5831] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET)
[   74.965739][ T5847] Illegal XDP return value 2676798247 on prog  (id 8) dev N/A, expect packet loss!
[   75.151614][ T5864] netlink: 'syz.2.72': attribute type 21 has an invalid length.
[   75.158024][ T5864] netlink: 128 bytes leftover after parsing attributes in process `syz.2.72'.
[   75.162054][ T5864] netlink: 3 bytes leftover after parsing attributes in process `syz.2.72'.
[   75.193534][ T5631] Bluetooth: hci0: command tx timeout
[   75.229760][ T5868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.275664][ T5631] Bluetooth: hci1: command tx timeout
[   75.370397][ T5631] Bluetooth: hci2: command tx timeout
[   76.956249][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.958697][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   77.274124][ T5631] Bluetooth: hci0: command tx timeout
[   77.354202][ T5631] Bluetooth: hci1: command tx timeout
[   77.435804][ T5631] Bluetooth: hci2: command tx timeout
[   77.971468][ T5850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.295895][ T5896] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   78.299039][ T5896] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   78.302614][ T5896] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   78.307153][ T5896] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   78.310040][ T5896] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   78.312623][ T5896] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   78.392744][ T5903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.90'.
[   78.405804][ T5903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.90'.
[   87.203119][   T24] cfg80211: failed to load regulatory.db
[  138.395315][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.397670][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  191.677258][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  191.683607][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.687237][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  199.838435][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  199.842780][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  261.285252][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  261.287510][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  322.716264][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  322.718748][ T1380] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
14:02:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84b47050 RBX=00000000ab06fd5d RCX=ffff8881066aca00 RDX=0000000000000000
RSI=00000000e9847064 RDI=00000000b2b0bc53 RBP=00000000990ed4d1 RSP=ffffc90000ba74c8
R8 =0000000080f4591f R9 =000000008ee1d252 R10=0000000011cf8513 R11=00000000679531f4
R12=000000000ac5a687 R13=00000000a24d6bcf R14=000000008f849f4f R15=00000000b953a94e
RIP=ffffffff81c5bfa0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc87000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055912e86d600 CR3=000000011316e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557a373418
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7738fede80
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557a373418
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80808082000fa603 0030a88082000fa4 030020988082000f a403001090808200
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8082000fbe030010 808082000fbe0300 10b88082000fbc03 0050908082000fbc
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84000fc403100400 0fc0030010a08082 000fbe0300109880 82000fbe03002088
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040e800401d01000 060175a8280e9c00 0200040a0eb00300
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0488000fc8030395 b00484000fc40310 04000fc0030010a0 8082000fbe030010
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 988082000fbe0300 20888082000fbe03 0010808082000fbe 030010b88082000f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc03005090808200 0fbc030020808082 000fbc0300048400 0fb803100488000f
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f455551494e555f 5f20722061636238 6661613966666666 666666660a303234
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6662386661613966 666666666666660a 31323433315f6f66 6e69646f6d5f4449
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66660a3232343331 5f6f666e69646f6d 5f44495f45555149 4e555f5f20722061
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3533315f6f666e69 646f6d5f44495f45 5551494e555f5f20 7220626363396661
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 495f455551494e55 5f5f207220626663 3966616139666666 66666666660a3131
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6232643966616139 6666666666666666 0a32313533315f6f 666e69646f6d5f44
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666660a33313533 315f6f666e69646f 6d5f44495f455551 494e555f5f207220
info registers vcpu 1

CPU#1
RAX=00000000001758bf RBX=ffffffff819a91ea RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dfaaa44 RDI=ffffffff8c28ade0 RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c6339db R9 =1ffff110478c673b R10=dffffc0000000000 R11=ffffed10478c673c
R12=0000000000000001 R13=1ffff1102c08f000 R14=0000000000000001 R15=1ffff1102c08f000
RIP=ffffffff8ba9a12f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9287000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055912e86e680 CR3=000000000e74a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004040003 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9bfcd967175dc38 12b3c9664e629eb9
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38cccfe006639cd6 8ccc6b774f581f8c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa973bdd28484e90 9627f6e758d42420
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd20df9fc896c2cb 518c912453ad7a85
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5d2ae4019ace378 9707c651e5c19b9b
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 841d483a0e86f09e 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 937490840727c84b a1f557d2dbde1b67
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61718b4300000000 366fc7b7ac09fac1
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b8b370b6451725e 4b4e1a1d82bc14be
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a0986afcc7d21f8 e24fce54fac4ca3a
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73616572003663 6974617473006575 6575715f6c6f7274 6e6f63203a732500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a56444057001346 4c51445156004050 4050545f494a5751 4b4a46051f560000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005591578ce260 00005591578cf200 0000000000000181 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055940e99a23b 0000000000000041 00000000306e616c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 491716034d02415b 50545f074e0e080c 17790c00611d381c 1d1415534e1b0e0b
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f1f576f5f5f775f 52575f1f7f7f5b7f 5f7f5d5d777f3f7f 5f7f1f5f5f7f5e5f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6261697261762061 2073657269757165 7220732520657079 7400746e656d6e67
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6564203436200a65 6e696665200a636f 62206465206d6500 6e69622033002036
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2064203436200a37 36202065200a6220 620a6265200a5f00 6e66612033002036
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
