last executing test programs:

1.764995016s ago: executing program 0 (id=849):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x3000000}}, 0x14)

1.711122715s ago: executing program 0 (id=851):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f0000000ac0)="11d2a13ceccd786b04d139dcc566dde69e58f6028be5e60d31cc36bfa362d281fd2faeaf4a389e61ec21f3b2bd0e0bd99468328c9730357633ca3c87ee8fe69a03c0b590cc30842e785224f8a89b1a889b2ae6e0ed380554392df2b9f9b51106e3c07e4fb5bfeb0622e769f3866f562d32055bc122e40275c41b0d9d06206c75a4bd88d8f78f2b5d3fc41fdfcdd89e9b856f403a8e96f67258081bfadef74aeeff3fb9c66be9550df1e5025e37f73ee82a697adb9ba5bd3d46a5b2ec1863697be484be973f1e2e439a0aec621020f1f7334536a70cc2d5db022685d2f27d6bbc5344", 0x0, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000c00000004000000fc"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

1.710376974s ago: executing program 0 (id=852):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x5, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1e}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r6, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x18, &(0x7f0000000180), &(0x7f0000000140)=""/24}, 0x50)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e06, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)="36ba6cdbbccc2516ca07b788893cd26c693c6df31bae07e6f1992fdd878ec2abd034341743eeb62b091d50f5c421dfa784b056bca7e4cf2d2a6b1445e92c685f7402662d29913ecf0520d09ccd12ccf1dcfddffc8f0ccc1686a8d8d5775f27aff4d95175d4601f4cc76384e241b988cbc83762a62cbe5c20", 0xb1}, {0x0}], 0x2, &(0x7f0000002b80)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYBLOB="5487c6496a5f82d58a3e7d86709f817d94220919712aba45fa97f7c64cec3c62babc803d1fac9d64b6ed09713dcf9ee92ec18026711fcd4862cffbfcd24e62d1a31bdb9d592dea558ae55403a8afbb6ed4c15584936026cea2495ddae3fd63ff9962999f8588e74f38fe69818d504c712ccd6f98ce7ce5bd5cc02d685cb2ad46f2fab207354acb981f71da10cf6948b77861212f2509e9ddc5468c19e25798f54696c538548356e56d460b9fb54bf1f005e94d65e2011d4c1228137b21d66c5b784cc65b090d03f23a61be102439b17cb591c11d75b0fe4b58f573ce787f10a641a32d8c362f767c0dd267d642a6de2c9ccbd77551c5e91aed0de5de5c992de2eb1319edc8b19442b034d0ca66cbb813990e8b529da0684fe15cb33b7e00750b6c1be4e2cc7614fcb9542f330932770bfaf3e95bd0a028222075c00f5d935bbb4d4c924f829601c79d298d6d08ffcd2d3f0694fc082e8f6e6cd9a59c5d76c005c3120f09fa6c7ea89e37cbe3769b659f165b7c132703d1a06d49f406b5c62b8f65ac100a71037321048810bf6dc8f0d420ddcf33e34e64106c52bd40416acacec16136403e2c0baa9b36a7a877a0f830d78f4f3ca949b4d87cc4a0e9ded302b02e3ec9a1f16ea636e8a4d1f96cdaa141e8c6d10047029f5bbb18d17643861758c23e07954b9cd8da870eeee611f9aefb590cf34977389671e489b96d93ae7ab060b35214158f2a2e378fe339c66d08bf57184a6474bc8d38d5a91a0784bc21a3b836c1d2f6fc866b1d9b65dc57bdb92db621ede33f244e69363ebfe6f7cc9e513590ace7a91e6764712703f9de142e1513c88269c6c5ad8522ad558bb5a3bd22b4054fff5c8b0319ade960153cdff35528cc2b8033b4b2784096fe18d0b3fd1f5c97989cbfc468878d77ba31d653b05950e5d3812a3e4cd6f1ff85e20dcf9994f0fb7a2961cea4eff6c05666effdd99e9017e6caa065faaef3f9108aa5daa09293712ed5c49199ecd6e6462e392b442e7d9ed6971dd72c03f7150d2dab1920933c9ace064a129abecd9629a0df8c3e8fb9e36e2c9e357a9e211428d03ea9eff5911f4447cdce1d03b7f0286eb8849f7f99ae19351632dc3d574a0a040f33c8810c1e73547177aec79a94ba3e413639d7357a543782f447df60916ade5b6863fad0e3ad2312b5a15c3c9e14018cd6f93a1c0c05fead9339547156055f920cf719292cb54a1b5b085dbaf278bc566db656304058ed9fc4dbe5766124de15b1ea5f700daff8f748b06bcc70ca084a47bef81345f3683de7e789fd4e8618c5310ffda6e33555182b06eaff7e6c8de2dbfdd89b85f88357f03c10c99b5cb4dcb0029cb09f20e0361e0d98e6bfdc86250b79b7ed0f8455d896310636cbecfbf464baaadb8ea8479b91f9308b07d57bf69cee41700bceb155af2306118bd66a0ba95afff1f024ac59a9df15d4c9bc9f7137dac684e15bee9181a69ac858d90641ba35cdbe624f0ba3bc69c4e2284476dfb174b147dd1fbb5611d36ae06b0bfdc5588efb153c0fa0d35acfcfed4e777bd80a63bd06c32c245ca82685e5f50ba7af068659ed6f211a8dd8c270e45490cccd9bcb4e3273912a06a994de07d4fafd7877106f8df2124ee9262ff981db3d7c9ccedfa1805df0ee1d46b1e7a98b56c1d4e899f488c02d9c87a44c58b00048652df34722c5284dfc1bc5b1289755092230a0fdb2deea84540e5b0aeaf929b19894cf052b69dc205495e8964e2fe4d7ad3a232ad54e86ac441a411ebe7df1fdc24fa4be0b90ae10d285e767ea3010eae24b9030df3ceb35307ff99e19c668f1c567e448ea17d7bac4125358d20fe453627911ca6d37b3b6207f2a6e7d800e86123286e9b36b94fa6de2cfbf60daf056ef900045b04b15e46acdf0cfa100090bea8a03e748df8369add54df8f1e3151fb625c7fff4dc4b0bf9f37aabde760e63c42b4f861f0707a4374c691519bbee59a0ff951cd76da6c803a1b5702e72c1133b33b24e46eae12994433105908aebba99e4ffc9af842d8102a3bea2ed85bd8de297cd23b5018dbeda30c0f9bdafb660da72240d704e7b72685723236b1a10115f8fe7f72ef336d82418ea40804b1e08c64a7f2f763819d5179c465463bef9ec21f4f91c3e1a41efe92b01ca1b0d0409c2f45ea264eec50328fe8cd166699d9dcdbe4869cb65346e8c20bc0967b5231dcd756a81f98a37b8f0e31fec3e91ec6b796df2c8b77dbc098fb7b031a4496d097b77ec31c54113dc95fedb004a68b06b4d8c7f41b6bc1ac73919f0f6e12cd6741694e403d9380330c257b463cdbaa0b590edff8d84d638399d7b9a1473364f15a57f611c4482571248f4b62ef842ff653852734763b58d611e14751f519a7ebfd993c2ae6382f981fdef1301f3df016792a347bdd073b152ddaaca4488e390653de91d27112522a84bb3f231dd1240822d753d7340e4dfa57912ec012a40150d89d7a05784210585c14a48e3c15c899aa4952920b0d42807f25d4e2dfeef14bac00a8eeda4fe48de778d785a7a1b556a37b63c80678d3bc11eeeafb469bb72bfce6dbbfb47b6e9897de72aa7039166bcb19d7b95ead6aa8c4ed97a6e1b226899a59d98c8163e290023d0d56faf964630592036f7c17352e6627d66c6305b5292b6ddbd5e7da1f14a4732b70abd491d9bdbfbddcf1ab1f2c84215b08772b10e022ea1b76dc5378c58b8c8e9189582bc62472c681487d87cc5f417b31709e899eff6389724927999f72f0ee4171f5ba56949dc7b0a8de7eca7564be805e409feb88c59a33c991b7faa465756a8ba964654908c6f3d2f18c959f5b5c90ceccc6ce181c39115e1e7ace3472f831b74ec5450403c25e741664b9ac9f34fd86dad16237fa45ed9a4de552aabb0003cb2bc7df6518e2e43ee32bc230e3887360a307b2fdd5bc4adcee2ffa41942111bcf79cdd24fb564eaee7e8e0da16828abf321992d0630ccf1cd03abc228942edd2c140f8a8e9fb9d6e3582d122c259af17cb49f0925b7c29be686767ae4ee4fcc2fcdf82051ff4688c3b20f7e6b043c1fc0e066eb11467cd65a5269e3ab6201ee185f1c8770216a6feb81411b0f69fa8e61028c38da345d2d569bb512c4d018fe7fb953e67b757a4de0ad40d2102005c643f6cfbcfd2ee055439117aeff0bafb5bf85be8fa68ce62712d2551c26e06bcade09abecd3f1a8b3bf872b114eabe3c14feb32a533f50af5ca6e49cbf8bc4fd4b5f3ac2de402ea89693be7488adcf443b86f14a9c7c6612e4c563132d475f5881f4321bae06fb53f6811da08d6016964484ab3a9a51bcf0591ae8779b605443c5ce48657aaf00de80cf4045058e94bea087cbb3dc230517dc6f60b9d1f77c22ccd40ced0951c8c5dd42b36a4a0a47f150dd11fd6c061372a282247956994a2b988a28dc78d0cfa8e3fad3b8d6696ab3fb0279c18888cdc67ac04deb8bd26d01d1181f8c22508ea81ae148165ebe5d8a924a833e558102c1ea1a88117902a974859d24c0ac438d4f7efd2f88804c82bc20f6192abb8dafefb06365a5ac4af922267ce88ec305dfaac5f9f2b0ee410f8014c9b6cf2183c06308c3c4c202901c2eda9e8db28deca199d6e646579d9dcd46f2f5b5cf50a5f0d777156e33e9472e1d94cb728a0026a03fb4acb01778a2a1eaf1e6697b2464face457326bcfbd9f0d5631b52c356c3730b0ec3e92cfa93920b928b134c793cfd74f4e588ecd43a8c2b9971ea03ae22109f65b1b20b64e1fb375e94a37205ec3607b8f914f45dc27da89468901fc32840e060c28c660d87aaf71325675dc7df1f7e80dcdbbddf58e429e604a54a348557ea96b57c7074ceb03fc31200c8661dedfcdd9db27ae8a86d6545ec4b1589c1bac12a518236605dff7c71652f29d090ac197aaff50638c41e8eba3764ca3f234b1584d701906bcc69eab818455f80e9bcde52da1bb3a77df9e5904d8d44626766a5dcc414f11f0410042a6fdcf569d5818fa4aaf367699dfa31765ff185924eab450098805e2494328a15e0a46ce2de99216cda0e82757f6f4fcb9c9526ba4ef036b6b8243b97ba1615d41635a5f2a762cfb1e35098a8bf80ed6acd5de18ca7d59418a36a118aa38eb7a29abc767014350564c8c4ef52c43a7d2b80a04178f1302c88c6a992546458c23d4f932a7170189a0b594a17d661cb70c56b9ad1fcc8ada04dc111e13c641794a1b1c8817d399d2449f76f5e67e0f18d13dfff0a2a3ee3cb4f90f7fc852099be4267d9b71bad445d434ecad8dfaa7998069a31980aa03990145e68cb7fa388099123f8ed530ce9c5d5d2b28d72c8ce3af2c79467a01f81c7bfaaf06a6204f88c30137bd2c5653950b064e58e03c888a5a15f307938f715007cd42373b3fc4a2b279f7abd03423e5bb8663e2c992db65906fe7f7772c2795f2b6f8aecd374ff7419825bc6ba7aa208fa8b8a26dba3e8e0b451d8b382a44139b5f84afe3665f683d3108cbe978d7f5ca976d74358b8c113732514ccad2053f9a214d04d8204af2c6384fbc4b673bf75afbf73957c5549bbed8002e9ede48b275de47634bb686d6e0bd8a8140efa3d9295c6bdf61bc89fa1068bb566a38dd902e60c02d43063184011b741f4f660369cc4548555cf02d93e16d277acdf5c8da52fcfb4d8607a919cbd6df809672a2eca6cf01c381453cd6e1e367e2d72aae7807b5243375c2308814d03900a859e0c5f557225d902df7a4e788b3905a4703653a2329b45dbf334fa0ad0790119d5109fa061ea6c47c27b04529c59b9d04e57b332ba0699f903086e614c5df0512fa0dc393713326acd6a9fb196c6be3e11107ecd1f8c993aebb80350914732991423e5e4a96fb48c20977cd3d4962efd42d27fe539c50bd79b42e704278207ab3641b0d3a09745bcf1547ac908bba613a6aa763dd3fb0b5f927b1dd21335f59150b44d1abe7d1ef43c55c83b59ca34bbd49e46460fd848999a70424bc302358ae8933dcbbafb55a87ae043c0c1f8caf6268ccf536df6e9ba27d5167db9fcf92cf7f6990e79e79b3a3bfb66f8583ff4d214da6c9b7ed158ac2bf86f2fd6b7fb671fcf3187eaa0bb184db01c514c1dba3969594bf05d7eab09ac8dbca6523244a2e8dd79a27d1b6ae0558b4b944c6883b1537524fe092d5a1fcfdc0c385b89acb6ba143d95f5477962b73e0b3605a40e1fe2f75087299185476359aab33d799c236761d0e3a2ad8051b3816952810a8039be1490ca182d13a0d65bcf0c5e8199712bae8ae623666e299de449e5739ef4ca24957d205e9d7acabc656dfd14cf6620b5afa4f1b80ac6bf38732f7faad6c899d28a7a4565aca384fac038e8c80851b22b2137cd2d4320f16abdf367609fbf55ded235529bf88d6a57a743d8cc96bf3ea5ac3c7ed703733f03d3b2a68093eaeda82f547d74be9303a799f73fa07c4eef1fb760335964fd113bdcfefad54d5b894012b54d8acee11e309dd1c3a341041a6ff61da075a33dbde2daa49f2dff11a1309dfd4967557be581f248b98c55dfadd01dd2150a3141bddd2dea42a6790c57ae3a9f9fd92c93ac6b488b1ec600299c1c324cd2ad02a454b1a1c225ec332e1c59cb14137ef8798396bd9c39db9214654a5db4f2a48464e62bdaae6b661851e7d8eed144eccd5f6121fc55863373f0246af0cea43390f838254c2704c3d30d8741347cb48e5135a2773bd3b0c6ed6fdccdc86f13a51a38d42c77a40d8ef7059484ab167182292abc4441b21af9683af5a79fa5e5f9d1b57ebec2605c8462aa55d91bea006", @ANYRESHEX, @ANYRESOCT], 0xe8}, 0x0)
setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000180)="00054000", 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000005c0)=0xe2, 0x4)
r8 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0)
sendfile(r4, r8, &(0x7f0000000240)=0x6, 0x9)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r9, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x17}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4)
sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x1c)
close(r3)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

810.29702ms ago: executing program 0 (id=877):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@local, @in=@rand_addr=0x64010101, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x84}, {0x0, 0x0, 0x0, 0xd07}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r4], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r9, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc6d1, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x8) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)

808.194697ms ago: executing program 0 (id=879):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xa0}], 0x1, 0x40800)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x83, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000300))
ioctl$SIOCSIFMTU(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7})
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000100))
recvmsg(r3, &(0x7f00000012c0)={&(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001080)=""/95, 0x5f}, {&(0x7f0000001100)=""/59, 0x3b}, {&(0x7f0000001140)=""/102, 0x66}, {&(0x7f00000011c0)=""/46, 0x2e}], 0x4, &(0x7f0000001240)=""/85, 0x55}, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000005340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/5, 0x5}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000000740)=""/23, 0x17}], 0xa, &(0x7f0000000840)=""/140, 0x8c}}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/57, 0x39}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x2, &(0x7f0000000a00)=""/102, 0x66}, 0x17930d70}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/147, 0x93}], 0x1, &(0x7f0000000c40)=""/88, 0x58}, 0x5}, {{&(0x7f0000000cc0)=@isdn, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/164, 0xa4}], 0x1, &(0x7f0000000e40)=""/164, 0xa4}, 0x97}], 0x4, 0x40010043, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeaa, 0x10, &(0x7f0000000180), 0x10, 0x0, r6}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00})
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

731.259056ms ago: executing program 0 (id=883):
close(0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/time_for_children\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000080))
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x4}, @tail_call, @call={0x85, 0x0, 0x0, 0x86}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x100, 0x0, '\x00', r1, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x0, 0x7, 0xf}, 0x10, 0x1b673, r0, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8, 0x1, 0x2, 0x0, 0x3, 0xc}, 0x20)
syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/804], 0x324)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x8000}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000480)=r2}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)=r0}, 0x20)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001cc0)={0x0, 0x200, 0x8}, 0xc)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffeb}, @alu={0x7, 0x0, 0x8, 0x2, 0x0, 0xc, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0x1000, &(0x7f0000000b80)=""/4096, 0x41100, 0x0, '\x00', r1, 0x39, r6, 0x8, &(0x7f0000001b80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001bc0)={0x2, 0xf, 0x0, 0xfffffff7}, 0x10, 0xd1f5, r2, 0x3, &(0x7f0000001d00)=[r7, r8, r9], &(0x7f0000001d40)=[{0x3, 0x3, 0x7, 0x3}, {0x5, 0x3, 0xd, 0x1}, {0x5, 0x5, 0xb, 0x2}], 0x10, 0x5}, 0x94)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r11)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r12, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r13 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

281.132695ms ago: executing program 1 (id=903):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x9, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x10000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

278.463223ms ago: executing program 2 (id=904):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000008700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

276.167581ms ago: executing program 2 (id=905):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f0000000ac0)="11d2a13ceccd786b04d139dcc566dde69e58f6028be5e60d31cc36bfa362d281fd2faeaf4a389e61ec21f3b2bd0e0bd99468328c9730357633ca3c87ee8fe69a03c0b590cc30842e785224f8a89b1a889b2ae6e0ed380554392df2b9f9b51106e3c07e4fb5bfeb0622e769f3866f562d32055bc122e40275c41b0d9d06206c75a4bd88d8f78f2b5d3fc41fdfcdd89e9b856f403a8e96f67258081bfadef74aeeff3fb9c66be9550df1e5025e37f73ee82a697adb9ba5bd3d46a5b2ec1863697be484be973f1e2e439a0aec621020f1f7334536a70cc2d5db022685d2f27d6bbc5344", 0x0, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000c00000004000000fc"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

224.247564ms ago: executing program 2 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x80}}, 0x0)
accept4(r0, &(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x80, 0x0)

180.922468ms ago: executing program 2 (id=907):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', <r7=>0x0})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r6, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x10, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20020004)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x144, 0x10, 0x20, 0x70bd28, 0x25dfdbff, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e21, 0x0, 0x1ffe, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, {0xfffffffffffffffe, 0x0, 0x800000000, 0x9, 0x10000000002c8, 0xcf5f, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2000c074}, 0x800)

129.706104ms ago: executing program 1 (id=908):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0)
sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44050}, 0x4000)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x198, r2, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x433cd6d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ccf47f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fa1eb49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3386ffad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64f250f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72fbef5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x209cd4c1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8adb718}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7267b49b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a7657e3}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a17459d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x456e9c4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1719fc15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e53ace9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x431c01f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

129.115501ms ago: executing program 1 (id=909):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async, rerun: 64)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async, rerun: 64)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
r4 = accept(r2, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47) (async, rerun: 64)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64)
socket$unix(0x1, 0x1, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
shutdown(r4, 0x0) (async)
setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x400, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8e5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_NEWSETELEM={0x17a0, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1774, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe72}]}, {0x1340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1334, 0xb, 0x0, 0x1, [{0x154, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x138, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "2d695514943c09abdeb1663ec1070ca927023626a57207edecaa0e031f1fbf85227d54d12f9b87ae8e44f07f79b6ad2e2f86f90d5c2218f5501b6a5117c2feafc735587b4f5121d4f94b5a1c97f14bb5517693025a2467ed8d88e246672bde3ccb0136c62ed48cc7f69e2f2508fb4c6cef08a78b8e0d4a8aede6757dbaf82b998294f2a3f0e49e1b4a534378446a15f3b55c4b8c4cdb8b061ba96bfb09bf89688b39a81626609381614750a4fe4e16c31574ecf159a58f43a3bc614c27f59d7d831715859f554eb43a8cf8fbf0de58754d9a9f6dae6b15f8c907f075b4f4a802d87ab0ccf68becaf28c030f4ceef8686a09055a876"}]}]}}}, {0x1184, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1170, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DATA={0x115c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x51, 0x1, "13afd8582e5af07cb39424419779a53b08a28b8d89716b1b1a6920a11da6f447c155e7e9df2b6dda3b4acfdea69652f9bb231cdef15964d4724c9c02ea553ca6be521c3275051cec39f5d9c93b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x19, 0x1, "2200edde02c09f4327e3294efc9e56511f02473bef"}, @NFTA_DATA_VALUE={0x5c, 0x1, "edded0ca6f47549611c044da1297a88771c1dd5f0ab0cbe65f4878ffb51937ffef9b13d678b4b0e48ce2e3c9a518c8529098ba8d2da6d634872c2ff59789771d6844e61ca4363c41f888f27aceb9d7ff13db6b07ca96c5d5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_KEY={0x118, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "ec3016423792190e234826e872a75305bce4955e2572b94ad205e413bb8eedcafb466e39bb23ae4d6923b054c6d4ad21666475c731635dc424210a70ef6009d39f5b12dff0c64f19825a74964ebb6106a8ce8d793e6edf9f0eecb56994ced23a57f486734eccedd03c4efcb60ee07c57879b0b7a04bb5d7dcfeb12116effba9811e2da16ec5638f3562523f52c193d6e7580c2d13e5c9b412a0503dce931573a17a1c9669b4385be81daed5d1fd9220d37adf761099dddec98ca5670a0667cbb285c8d5ab2c827147a49bfb60a235047e1b478"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "b168dc104c025dbe2e65ef743b3a11c37c4b4314c7bf19e29b045d1883936b90b1d68ef9226b95b7880415f224bfee2e8530eaa6081ef4e4"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x11, 0x6, 0x1, 0x0, "4833beac0d797cd2e806e1ff7a"}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xa6, 0x6, 0x1, 0x0, "96fc9a76ac210ab5c608a4b992b8d46af062d630a3c619ae9717773d387f1c5145852d6140a0aa43386614a2d9154d95e23692ab5257ffa3d4ee14bb0d5582f8e05ffb3724971b73b2e4345e574b9ab5394bbedccd52f6e482f1a83d8fc55533aa950768dba6c53ac36256a5d98dceef1f20cd99bb07997ccb27ae269981e30e63ead530c91fd944624028d032a0d14344836283bf91cde26145eb012fe00244ece4"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x9, 0x8, "777d5a25c4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x27, 0x8, "7edbe588b014924c9222d0274357a4f76b017504aab58350e2f24c7d2fe6f191d992f8"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1980}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) (async, rerun: 32)
setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast}) (async)
ioctl(r6, 0x8b32, &(0x7f0000000040)) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) (rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00'})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, 0x0, &(0x7f0000000540)=0x25) (async, rerun: 64)
syz_emit_ethernet(0x4a, &(0x7f0000001140)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)

52.034166ms ago: executing program 1 (id=910):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x56500}, 0xfffe, {[0x5447, 0x3, 0x7, 0x1, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x18, 0x3d, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-generic\x00'}, 0x58)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000003da7100"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x8, 0x9, 0x464000, 0x4a8, r6, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000180)={0x8}, 0x8)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
ioctl$TUNGETDEVNETNS(r12, 0x54e3, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r11, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x6, 0xc, 0x2, 0x8, 0xffffface}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r14 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r15=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r15, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c000280050016000000000006000f000000000006000e0040"], 0x4c}}, 0x0)
connect$802154_dgram(r0, &(0x7f0000000240), 0x14)

2.058779ms ago: executing program 2 (id=911):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000008700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

1.400092ms ago: executing program 1 (id=912):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f0000000ac0)="11d2a13ceccd786b04d139dcc566dde69e58f6028be5e60d31cc36bfa362d281fd2faeaf4a389e61ec21f3b2bd0e0bd99468328c9730357633ca3c87ee8fe69a03c0b590cc30842e785224f8a89b1a889b2ae6e0ed380554392df2b9f9b51106e3c07e4fb5bfeb0622e769f3866f562d32055bc122e40275c41b0d9d06206c75a4bd88d8f78f2b5d3fc41fdfcdd89e9b856f403a8e96f67258081bfadef74aeeff3fb9c66be9550df1e5025e37f73ee82a697adb9ba5bd3d46a5b2ec1863697be484be973f1e2e439a0aec621020f1f7334536a70cc2d5db022685d2f27d6bbc5344", 0x0, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000c00000004000000fc"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

1.243967ms ago: executing program 2 (id=913):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa85, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x30, 0x1a, 0x20000000, 0x0, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x6c}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010027bd7000000000000a002040000000070000000014000100ff020c00000000000000000000000001050016002b00000014000200"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7, <r9=>0xffffffffffffffff}, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3, @ANYRES16=r9], 0x4c}}, 0x40000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000e27f000003"], 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x6, 0x8, 0x0, 0x1}, 0x50)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000004c0)=""/39, &(0x7f0000000500)=0x27)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r11, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r12}, &(0x7f0000000880), &(0x7f00000008c0)=r10}, 0x20)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
unshare(0x6000000)

0s ago: executing program 1 (id=914):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20810' (ED25519) to the list of known hosts.
syzkaller login: [   40.734852][ T5749] cgroup: Unknown subsys name 'net'
[   40.858204][ T5749] cgroup: Unknown subsys name 'cpuset'
[   40.863134][ T5749] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.121456][ T5749] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.177109][ T5211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.179702][ T5211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.183193][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.186171][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.189453][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.191839][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.195219][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.198037][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.218161][ T5211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.230424][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.233038][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.235435][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.238373][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.242550][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.247516][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.372870][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   45.500945][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   45.514855][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.517686][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.520141][ T5815] bridge_slave_0: entered allmulticast mode
[   45.522940][ T5815] bridge_slave_0: entered promiscuous mode
[   45.527003][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.529413][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.531825][ T5815] bridge_slave_1: entered allmulticast mode
[   45.534530][ T5815] bridge_slave_1: entered promiscuous mode
[   45.568883][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.573760][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.586194][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   45.625025][ T5815] team0: Port device team_slave_0 added
[   45.641036][ T5815] team0: Port device team_slave_1 added
[   45.649740][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.652203][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.654623][ T5823] bridge_slave_0: entered allmulticast mode
[   45.658271][ T5823] bridge_slave_0: entered promiscuous mode
[   45.678467][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.680868][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.683218][ T5823] bridge_slave_1: entered allmulticast mode
[   45.686057][ T5823] bridge_slave_1: entered promiscuous mode
[   45.709388][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.711782][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.721047][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.734176][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.741480][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.743802][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.752373][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.771860][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.779110][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.781510][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.784050][ T5819] bridge_slave_0: entered allmulticast mode
[   45.787187][ T5819] bridge_slave_0: entered promiscuous mode
[   45.804381][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.807006][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.809371][ T5819] bridge_slave_1: entered allmulticast mode
[   45.812086][ T5819] bridge_slave_1: entered promiscuous mode
[   45.835422][ T5823] team0: Port device team_slave_0 added
[   45.841310][ T5815] hsr_slave_0: entered promiscuous mode
[   45.843747][ T5815] hsr_slave_1: entered promiscuous mode
[   45.853527][ T5823] team0: Port device team_slave_1 added
[   45.863528][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.882311][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.886294][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.888634][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.897226][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.919694][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.922006][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.930560][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.941666][ T5819] team0: Port device team_slave_0 added
[   45.951497][ T5819] team0: Port device team_slave_1 added
[   45.993177][ T5823] hsr_slave_0: entered promiscuous mode
[   45.995817][ T5823] hsr_slave_1: entered promiscuous mode
[   45.998002][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   45.999939][ T5823] Cannot create hsr debugfs directory
[   46.005163][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.007838][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.016593][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.021124][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.023463][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.032378][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.097588][ T5819] hsr_slave_0: entered promiscuous mode
[   46.099969][ T5819] hsr_slave_1: entered promiscuous mode
[   46.102161][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[   46.104117][ T5819] Cannot create hsr debugfs directory
[   46.206180][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.220075][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.232090][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.243468][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.271743][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.283713][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.289548][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.292021][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.294731][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.297195][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.316811][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.321563][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.332328][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.346520][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.352303][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.361837][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.370279][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.372717][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.375235][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.377629][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.408122][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.411266][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.416069][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.418857][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.441842][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.463879][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   46.470268][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.472609][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.494317][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.499819][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.502195][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.507440][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.527272][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   46.533184][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   46.541757][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.544130][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.550678][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.553041][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.563998][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.566477][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.583548][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.587443][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.592525][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.594935][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.622386][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.721817][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.753971][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.783810][ T5819] veth0_vlan: entered promiscuous mode
[   46.787761][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.808606][ T5823] veth0_vlan: entered promiscuous mode
[   46.815198][ T5819] veth1_vlan: entered promiscuous mode
[   46.821661][ T5823] veth1_vlan: entered promiscuous mode
[   46.849388][ T5815] veth0_vlan: entered promiscuous mode
[   46.858107][ T5823] veth0_macvtap: entered promiscuous mode
[   46.860775][ T5815] veth1_vlan: entered promiscuous mode
[   46.868100][ T5823] veth1_macvtap: entered promiscuous mode
[   46.871538][ T5819] veth0_macvtap: entered promiscuous mode
[   46.880187][ T5819] veth1_macvtap: entered promiscuous mode
[   46.892320][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.904306][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.908717][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.915092][ T5815] veth0_macvtap: entered promiscuous mode
[   46.920577][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.924537][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.928843][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.935144][ T5815] veth1_macvtap: entered promiscuous mode
[   46.938773][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.948370][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.951269][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.960512][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.968430][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.974625][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.978490][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.989128][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.995191][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.008988][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.019072][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.025207][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.067257][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.070140][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.081253][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.087496][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.096759][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.101930][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.113698][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.121702][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.134035][  T398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.143246][  T398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.156757][  T398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.158768][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.159875][  T398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.199481][ T5889] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.206455][ T5818] Bluetooth: hci0: command tx timeout
[   47.286599][ T5818] Bluetooth: hci2: command tx timeout
[   47.286702][ T5821] Bluetooth: hci1: command tx timeout
[   47.615246][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'.
[   47.708691][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'.
[   47.730513][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6'.
[   47.882521][ T5908] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   48.278082][ T5916] veth3: entered promiscuous mode
[   48.287279][ T5917] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   48.293771][ T5917] team0: Port device dummy0 added
[   48.297341][ T5917] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   48.306897][ T5917] team0: Port device dummy0 removed
[   48.310772][ T5917] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   48.506787][ T5922] Zero length message leads to an empty skb
[   49.073796][ T5917] syz.1.10 (5917) used greatest stack depth: 20760 bytes left
[   49.108485][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'.
[   49.133027][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'.
[   49.143523][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'.
[   49.288238][ T5821] Bluetooth: hci0: command tx timeout
[   49.368261][ T5821] Bluetooth: hci2: command tx timeout
[   49.368307][ T5818] Bluetooth: hci1: command tx timeout
[   49.928013][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'.
[   49.960405][ T5963] wg1: entered promiscuous mode
[   49.962063][ T5963] wg1: entered allmulticast mode
[   49.973795][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'.
[   49.981919][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'.
[   50.002769][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.326255][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'.
[   50.449694][ T5992] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   50.466306][ T5992] bond1: entered promiscuous mode
[   50.468483][ T5992] bond1: entered allmulticast mode
[   50.471020][ T5992] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.368218][ T5818] Bluetooth: hci0: command tx timeout
[   51.447050][ T5818] Bluetooth: hci1: command tx timeout
[   51.449198][ T5818] Bluetooth: hci2: command tx timeout
[   51.669704][ T6044] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   51.802832][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.847464][ T6058] Bluetooth: MGMT ver 1.23
[   51.881431][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.264529][ T5849] IPVS: starting estimator thread 0...
[   52.364609][ T6082] IPVS: using max 79 ests per chain, 189600 per kthread
[   52.451252][ T6099] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[   52.454750][ T6099] netlink: 'syz.2.76': attribute type 4 has an invalid length.
[   52.658007][ T6116] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   52.681667][ T6119] openvswitch: netlink: Unknown key attributes 2
[   52.907514][ T6139] veth0_to_bridge: entered promiscuous mode
[   52.911807][ T6138] veth0_to_bridge: left promiscuous mode
[   52.929748][ T6142] __nla_validate_parse: 7 callbacks suppressed
[   52.929758][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[   53.032816][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'.
[   53.043111][ T6155] veth0_to_bridge: entered promiscuous mode
[   53.049911][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'.
[   53.053663][ T6154] veth0_to_bridge: left promiscuous mode
[   53.068486][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.100'.
[   53.128380][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   53.181484][ T6167] tipc: Started in network mode
[   53.183253][ T6167] tipc: Node identity fe8c767d4f54, cluster identity 4711
[   53.187069][ T6167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.189833][ T6167] syzkaller0: entered promiscuous mode
[   53.191876][ T6167] syzkaller0: entered allmulticast mode
[   53.225680][ T6163] tipc: Resetting bearer <eth:syzkaller0>
[   53.232755][ T6162] tipc: Resetting bearer <eth:syzkaller0>
[   53.239299][ T6162] tipc: Disabling bearer <eth:syzkaller0>
[   53.297452][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[   53.300497][ T6178] openvswitch: netlink: Flow actions attr not present in new flow.
[   53.311892][ T6178] smc: net device bond0 applied user defined pnetid SYZ2
[   53.314706][ T6178] smc: net device bond0 erased user defined pnetid SYZ2
[   53.352936][ T6180] syzkaller0: entered promiscuous mode
[   53.354882][ T6180] syzkaller0: entered allmulticast mode
[   53.456545][ T5821] Bluetooth: hci0: command tx timeout
[   53.525939][ T5818] Bluetooth: hci1: command tx timeout
[   53.527983][ T5821] Bluetooth: hci2: command tx timeout
[   53.675824][ T6200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.112'.
[   53.678908][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'.
[   54.112350][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   54.129601][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'.
[   54.171830][ T6219] netlink: 'syz.0.120': attribute type 21 has an invalid length.
[   54.284882][ T6229] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   54.483683][ T6249] bridge_slave_0: left allmulticast mode
[   54.487173][ T6249] bridge_slave_0: left promiscuous mode
[   54.489413][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.495082][ T6249] bridge_slave_1: left allmulticast mode
[   54.497740][ T6249] bridge_slave_1: left promiscuous mode
[   54.499694][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.505361][ T6249] bond0: (slave bond_slave_0): Releasing backup interface
[   54.512779][ T6249] bond0: (slave bond_slave_1): Releasing backup interface
[   54.526294][ T6249] team0: Port device team_slave_0 removed
[   54.544721][ T6249] team0: Port device team_slave_1 removed
[   54.548845][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.551402][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.554696][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.557783][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.572734][ T6255] ip6gre1: entered allmulticast mode
[   54.622629][ T6249] team0: Mode changed to "activebackup"
[   54.828830][ T6282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.900910][ T6289] netlink: 'syz.2.144': attribute type 2 has an invalid length.
[   55.014006][ T6300] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   55.070548][ T6309] netlink: 'syz.0.153': attribute type 29 has an invalid length.
[   55.073630][ T6309] netlink: 'syz.0.153': attribute type 29 has an invalid length.
[   55.414741][ T6341] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   55.447926][ T6344] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   55.615700][ T5821] Bluetooth: hci2: command tx timeout
[   55.815384][ T6369] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.822484][ T6370] macvlan2: entered promiscuous mode
[   55.824259][ T6370] macvlan2: entered allmulticast mode
[   55.826817][ T6370] bond1: entered promiscuous mode
[   55.828826][ T6370] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.832455][ T6370] bond1: left promiscuous mode
[   55.988500][ T6384] netlink: 'syz.2.177': attribute type 31 has an invalid length.
[   56.231604][ T6404] @: renamed from bond_slave_0
[   56.369057][ T6411] netlink: 'syz.1.188': attribute type 12 has an invalid length.
[   56.371744][ T6411] netlink: 'syz.1.188': attribute type 11 has an invalid length.
[   56.586422][ T6424] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   56.596594][ T6424] bridge_slave_0: left allmulticast mode
[   56.598450][ T6424] bridge_slave_0: left promiscuous mode
[   56.600327][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.604462][ T6424] bridge_slave_1: left allmulticast mode
[   56.608399][ T6424] bridge_slave_1: left promiscuous mode
[   56.610351][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.614987][ T6424] bond0: (slave bond_slave_0): Releasing backup interface
[   56.620821][ T6424] bond0: (slave bond_slave_1): Releasing backup interface
[   56.628445][ T6424] team0: Port device team_slave_0 removed
[   56.633230][ T6424] team0: Port device team_slave_1 removed
[   56.637708][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.640263][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.644382][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.647581][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.663537][ T6424] netlink: 'syz.0.194': attribute type 10 has an invalid length.
[   56.666740][ T6424] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   56.671934][ T6424] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.051967][ T6429] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   57.118234][ T6436] syzkaller0: entered promiscuous mode
[   57.120209][ T6436] syzkaller0: entered allmulticast mode
[   57.818298][   T96] cfg80211: failed to load regulatory.db
[   57.946380][ T6463] netlink: 'syz.0.208': attribute type 6 has an invalid length.
[   57.949881][ T6463] netlink: 'syz.0.208': attribute type 6 has an invalid length.
[   57.957607][ T6463] __nla_validate_parse: 33 callbacks suppressed
[   57.957616][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   58.123986][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   58.165411][ T6481] netlink: 'syz.1.216': attribute type 11 has an invalid length.
[   58.245758][ T5821] Bluetooth: hci2: command tx timeout
[   58.302831][ T6487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.219'.
[   58.307615][ T6487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.219'.
[   58.361645][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'.
[   58.439999][ T6498] netlink: 45 bytes leftover after parsing attributes in process `syz.1.224'.
[   58.443887][ T6498] tipc: Started in network mode
[   58.446293][ T6498] tipc: Node identity 5ee22066daf9, cluster identity 4711
[   58.449187][ T6498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.460718][ T6497] tipc: Disabling bearer <eth:syzkaller0>
[   58.517711][ T6500] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.821362][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'.
[   58.833061][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'.
[   58.837271][ T6509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.885172][ T6517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.232'.
[   58.888189][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[   58.962414][ T6529] team_slave_0: entered promiscuous mode
[   58.964435][ T6529] team_slave_1: entered promiscuous mode
[   58.972637][ T6529] team_slave_0: left promiscuous mode
[   58.974523][ T6529] team_slave_1: left promiscuous mode
[   59.061821][ T6529] team0 (unregistering): Port device team_slave_0 removed
[   59.069906][ T6529] team0 (unregistering): Port device team_slave_1 removed
[   59.632035][ T6603] IPv6: addrconf: prefix option has invalid lifetime
[   59.634283][ T6603] IPv6: addrconf: prefix option has invalid lifetime
[   59.636545][ T6603] IPv6: addrconf: prefix option has invalid lifetime
[   59.643363][ T6604] openvswitch: netlink: Flow actions attr not present in new flow.
[   59.866443][ T6630] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   59.938670][ T6641] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   59.941363][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.948496][ T6641] validate_nla: 34 callbacks suppressed
[   59.948504][ T6641] netlink: 'syz.2.276': attribute type 7 has an invalid length.
[   59.959828][ T6641] : entered promiscuous mode
[   60.072996][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.082299][ T6657] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   60.084883][ T6657] netlink: 'syz.0.282': attribute type 11 has an invalid length.
[   60.111629][ T6662] IPVS: length: 183 != 8
[   60.319957][ T6683] netlink: 'syz.2.294': attribute type 1 has an invalid length.
[   60.322447][ T6683] netlink: 'syz.2.294': attribute type 4 has an invalid length.
[   60.405604][ T5821] Bluetooth: hci2: command tx timeout
[   60.422081][ T6685] netlink: 'syz.1.295': attribute type 23 has an invalid length.
[   61.094742][ T6756] netlink: 'syz.2.320': attribute type 27 has an invalid length.
[   61.581904][ T6792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.585339][ T6791] tipc: Resetting bearer <eth:syzkaller0>
[   62.166994][ T6791] tipc: Disabling bearer <eth:syzkaller0>
[   62.778176][ T5270] udevd[5270]: worker [5816] terminated by signal 33 (Unknown signal 33)
[   62.784708][ T6859] netlink: 'syz.1.358': attribute type 3 has an invalid length.
[   62.787100][ T6862] ipvlan2: entered promiscuous mode
[   63.131094][ T6896] __nla_validate_parse: 25 callbacks suppressed
[   63.131106][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'.
[   63.147947][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[   63.230569][ T6898] netlink: 216 bytes leftover after parsing attributes in process `syz.1.371'.
[   63.233544][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'.
[   63.236645][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'.
[   63.240437][ T6898] netlink: 256 bytes leftover after parsing attributes in process `syz.1.371'.
[   63.444591][ T6901] tipc: Can't bind to reserved service type 0
[   63.485860][ T6903] netlink: 'syz.2.374': attribute type 9 has an invalid length.
[   63.490231][ T6903] netlink: 'syz.2.374': attribute type 7 has an invalid length.
[   63.551944][ T6911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.377'.
[   63.749343][ T6932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.386'.
[   63.798861][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[   63.820921][ T6941] syz.2.388 (6941) used greatest stack depth: 20696 bytes left
[   63.849181][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.387'.
[   64.063604][ T6973] vlan2: entered promiscuous mode
[   64.065882][ T6973] bridge0: entered promiscuous mode
[   64.080862][ T6973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.083949][ T6973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   65.140834][ T7017] veth3: left promiscuous mode
[   65.142760][ T7017] bond1: left promiscuous mode
[   65.144361][ T7017] bond1: left allmulticast mode
[   65.148634][ T7017] ip6gre1: left allmulticast mode
[   65.156890][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.159908][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.162863][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.166625][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.169639][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.172605][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.176434][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.179384][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.895376][ T7049] netlink: 'syz.0.419': attribute type 11 has an invalid length.
[   65.996216][ T7067] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   66.105751][ T7081] sctp: [Deprecated]: syz.0.423 (pid 7081) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.105751][ T7081] Use struct sctp_sack_info instead
[   66.114208][ T7080] netlink: 'syz.2.430': attribute type 11 has an invalid length.
[   66.137995][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.146675][ T7083] validate_nla: 2 callbacks suppressed
[   66.146684][ T7083] netlink: 'syz.1.431': attribute type 1 has an invalid length.
[   66.150969][ T7083] netlink: 'syz.1.431': attribute type 11 has an invalid length.
[   66.704673][ T7124] x_tables: ip_tables: udp match: only valid for protocol 17
[   67.062877][ T7180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.044289][ T7289] netlink: 'syz.0.508': attribute type 142 has an invalid length.
[   68.111663][ T2207] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0
[   68.117371][ T2207] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[   68.180206][ T7312] __nla_validate_parse: 38 callbacks suppressed
[   68.180218][ T7312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.514'.
[   68.287840][ T7319] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   68.324659][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'.
[   68.333564][ T7328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.520'.
[   68.372483][ T7330] geneve2: entered promiscuous mode
[   68.374938][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   68.379536][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   68.383203][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   68.395877][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   68.418902][ T7339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.523'.
[   68.488719][ T7348] netlink: 'syz.0.527': attribute type 10 has an invalid length.
[   68.491178][ T7348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.527'.
[   68.494306][ T7348] dummy0: entered promiscuous mode
[   68.498833][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'.
[   68.499593][ T7348] bridge0: port 1(dummy0) entered blocking state
[   68.503792][ T7348] bridge0: port 1(dummy0) entered disabled state
[   68.507140][ T7348] dummy0: entered allmulticast mode
[   68.543061][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'.
[   68.551054][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.529'.
[   68.600947][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'.
[   68.687079][ T7372] netlink: 152 bytes leftover after parsing attributes in process `syz.2.534'.
[   68.888982][ T7390] netlink: 'syz.1.540': attribute type 10 has an invalid length.
[   69.096794][ T7420] team0: Mode "loadbAlance" not found
[   69.521377][ T7457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.524942][ T7457] netlink: 'syz.0.561': attribute type 4 has an invalid length.
[   69.780908][ T7482] netlink: 'syz.0.570': attribute type 13 has an invalid length.
[   69.783714][ T7482] netlink: 'syz.0.570': attribute type 17 has an invalid length.
[   69.818398][ T7482] bridge0: port 1(dummy0) entered blocking state
[   69.820672][ T7482] bridge0: port 1(dummy0) entered forwarding state
[   69.825436][ T7482] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.828584][ T7482] 8021q: adding VLAN 0 to HW filter on device team0
[   69.833823][ T7482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.855833][ T7482] syz.0.570 (7482) used greatest stack depth: 20376 bytes left
[   70.093739][   T33] audit: type=1800 audit(1754445168.479:2): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.576" name="memory.events" dev="tmpfs" ino=1001 res=0 errno=0
[   70.126014][ T7514] netlink: 'syz.2.582': attribute type 31 has an invalid length.
[   70.182269][ T7520] delete_channel: no stack
[   70.292188][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.309299][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.352748][ T7539] Driver unsupported XDP return value 0 on prog  (id 178) dev N/A, expect packet loss!
[   70.541789][ T7562] netlink: 'syz.1.599': attribute type 2 has an invalid length.
[   70.808830][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.810944][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.928002][ T7628] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   70.935416][ T7628] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.939388][ T7630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.015115][ T7635] geneve2: entered promiscuous mode
[   71.016942][ T7635] geneve2: entered allmulticast mode
[   71.020136][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   71.023518][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   71.043201][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   71.046149][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   71.620264][ T7704] validate_nla: 2 callbacks suppressed
[   71.620274][ T7704] netlink: 'syz.2.647': attribute type 11 has an invalid length.
[   71.753194][ T7730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.757309][ T7730] netlink: 'syz.0.651': attribute type 4 has an invalid length.
[   72.180858][ T7793] netlink: 'syz.0.671': attribute type 11 has an invalid length.
[   73.094073][ T7861] bond0: entered promiscuous mode
[   73.097865][ T7861] bond0: left promiscuous mode
[   73.549599][ T7875] __nla_validate_parse: 52 callbacks suppressed
[   73.549610][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.711'.
[   73.573984][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[   73.583371][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'.
[   73.693036][ T7895] IPVS: length: 95 != 8
[   73.790525][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.717'.
[   73.811258][ T7901] netlink: 87 bytes leftover after parsing attributes in process `syz.0.716'.
[   73.862375][ T7915] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   73.865275][ T7915] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   73.866555][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'.
[   73.978236][ T7927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.724'.
[   73.984573][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.723'.
[   74.020668][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[   74.023685][ T7932] netlink: 'syz.2.726': attribute type 30 has an invalid length.
[   74.032969][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[   74.033699][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.038332][ T7932] netlink: 'syz.2.726': attribute type 30 has an invalid length.
[   74.041342][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.045365][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.050249][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.510232][ T7966] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   74.513676][ T7966] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   75.147586][ T8006] netlink: 'syz.1.752': attribute type 8 has an invalid length.
[   75.150716][ T8006] netlink: 'syz.1.752': attribute type 8 has an invalid length.
[   75.314900][ T8027] netlink: 'syz.1.761': attribute type 8 has an invalid length.
[   75.318081][ T8027] netlink: 'syz.1.761': attribute type 8 has an invalid length.
[   76.664636][ T8113] netlink: 'syz.1.791': attribute type 1 has an invalid length.
[   76.684666][ T8113] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   76.688671][ T5836] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   76.689080][ T8115] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.788608][ T8116] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   76.791793][ T8116] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[   76.796324][ T8116] bond2 (unregistering): Released all slaves
[   76.807658][ T8121] batman_adv: batadv0: Adding interface: dummy0
[   76.809830][ T8121] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.819484][ T8121] batman_adv: batadv0: Interface activated: dummy0
[   76.826906][ T8126] batadv0: mtu less than device minimum
[   76.829265][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.833197][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.837160][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.840931][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.844705][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.848616][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.852410][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.856424][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.860222][ T8126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.928919][ T8133] netlink: 'syz.0.797': attribute type 11 has an invalid length.
[   77.111559][ T8165] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.122835][ T8165] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   77.930179][ T8285] erspan0: entered promiscuous mode
[   78.257277][ T8319] netlink: 'syz.1.862': attribute type 3 has an invalid length.
[   78.332588][ T8323] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[   78.332945][ T8324] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[   78.338809][ T8324] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[   78.341450][ T8323] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[   78.678102][ T8342] __nla_validate_parse: 40 callbacks suppressed
[   78.678122][ T8342] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.871'.
[   78.686538][ T8342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.689993][ T8342] IPv6: NLM_F_CREATE should be set when creating new route
[   78.693133][ T8342] IPv6: NLM_F_CREATE should be set when creating new route
[   78.866443][ T8354] netlink: 'syz.2.876': attribute type 27 has an invalid length.
[   78.980105][ T8370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.103780][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'.
[   79.212743][ T8391] netlink: 72 bytes leftover after parsing attributes in process `syz.2.893'.
[   79.226025][ T8393] gtp0: entered promiscuous mode
[   79.227855][ T8393] gtp0: entered allmulticast mode
[   79.366703][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'.
[   79.390673][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.902'.
[   79.416063][ T8415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.418773][ T8415] syzkaller0: entered promiscuous mode
[   79.420723][ T8415] syzkaller0: entered allmulticast mode
[   79.425832][ T8415] tipc: Resetting bearer <eth:syzkaller0>
[   79.428705][ T8414] tipc: Resetting bearer <eth:syzkaller0>
[   79.437628][ T8414] tipc: Disabling bearer <eth:syzkaller0>
[   79.709879][ T8439] netlink: 'syz.2.913': attribute type 3 has an invalid length.
[   79.712511][ T8439] netlink: 'syz.2.913': attribute type 3 has an invalid length.
[   79.716545][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'.
[   79.720206][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'.
[   79.724858][ T8439] ------------[ cut here ]------------
[   79.726836][ T8439] WARNING: CPU: 0 PID: 8439 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080
[   79.730246][ T8439] Modules linked in:
[   79.731866][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.2.913 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[   79.736425][ T8439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.739734][ T8439] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[   79.741676][ T8439] Code: fa be 02 00 00 00 eb 0a e8 35 26 ad fa be 01 00 00 00 4c 89 f7 e8 58 8b b2 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 19 26 ad fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[   79.748183][ T8439] RSP: 0018:ffffc90002e0ef08 EFLAGS: 00010283
[   79.750233][ T8439] RAX: ffffffff87128a97 RBX: 0000000000000001 RCX: 0000000000080000
[   79.752878][ T8439] RDX: ffffc90008a94000 RSI: 00000000000004af RDI: 00000000000004b0
[   79.755460][ T8439] RBP: dffffc0000000000 R08: ffff888029bdd82f R09: 1ffff1100537bb05
[   79.758110][ T8439] R10: dffffc0000000000 R11: ffffed100537bb06 R12: ffff88801195d000
[   79.760652][ T8439] R13: ffffc90002e0f080 R14: 0000000000000000 R15: ffffc90002e0f098
[   79.763194][ T8439] FS:  00007faae94376c0(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[   79.766481][ T8439] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   79.768815][ T8439] CR2: 0000200000001340 CR3: 000000011022c000 CR4: 00000000000006f0
[   79.771441][ T8439] Call Trace:
[   79.772591][ T8439]  <TASK>
[   79.773555][ T8439]  notifier_call_chain+0x1b6/0x3e0
[   79.775275][ T8439]  ? atomic_notifier_call_chain+0x26/0x180
[   79.777690][ T8439]  atomic_notifier_call_chain+0xda/0x180
[   79.779528][ T8439]  call_fib_notifiers+0x31/0x60
[   79.781126][ T8439]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[   79.783220][ T8439]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[   79.786591][ T8439]  ? inet6_rtm_newroute+0xe8b/0x18c0
[   79.788311][ T8439]  inet6_rtm_newroute+0x12f5/0x18c0
[   79.790017][ T8439]  ? nlmon_xmit+0xb0/0x100
[   79.791480][ T8439]  ? kmem_cache_free+0x18f/0x400
[   79.793096][ T8439]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   79.794895][ T8439]  ? __local_bh_enable_ip+0x12d/0x1c0
[   79.797250][ T8439]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   79.799042][ T8439]  rtnetlink_rcv_msg+0x7cf/0xb70
[   79.800654][ T8439]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   79.802326][ T8439]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   79.804106][ T8439]  ? ref_tracker_free+0x63a/0x7d0
[   79.806395][ T8439]  ? __asan_memcpy+0x40/0x70
[   79.807898][ T8439]  ? __pfx_ref_tracker_free+0x10/0x10
[   79.809629][ T8439]  netlink_rcv_skb+0x208/0x470
[   79.811184][ T8439]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   79.813532][ T8439]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.815242][ T8439]  ? netlink_deliver_tap+0x2e/0x1b0
[   79.817685][ T8439]  netlink_unicast+0x82f/0x9e0
[   79.819226][ T8439]  ? __pfx_netlink_unicast+0x10/0x10
[   79.820955][ T8439]  ? netlink_sendmsg+0x642/0xb30
[   79.822558][ T8439]  ? skb_put+0x11b/0x210
[   79.823955][ T8439]  netlink_sendmsg+0x805/0xb30
[   79.825898][ T8439]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.827638][ T8439]  ? aa_sock_msg_perm+0x94/0x160
[   79.829245][ T8439]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   79.830952][ T8439]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.832669][ T8439]  __sock_sendmsg+0x21c/0x270
[   79.834181][ T8439]  ____sys_sendmsg+0x52d/0x830
[   79.836329][ T8439]  ? __pfx_____sys_sendmsg+0x10/0x10
[   79.838041][ T8439]  ? import_iovec+0x74/0xa0
[   79.839527][ T8439]  ___sys_sendmsg+0x21f/0x2a0
[   79.841057][ T8439]  ? __pfx____sys_sendmsg+0x10/0x10
[   79.842771][ T8439]  ? __fget_files+0x2a/0x420
[   79.844259][ T8439]  ? __fget_files+0x3a0/0x420
[   79.846889][ T8439]  __sys_sendmmsg+0x227/0x430
[   79.848430][ T8439]  ? __pfx___sys_sendmmsg+0x10/0x10
[   79.850156][ T8439]  ? do_futex+0x395/0x420
[   79.851578][ T8439]  ? rcu_is_watching+0x15/0xb0
[   79.853120][ T8439]  __x64_sys_sendmmsg+0xa0/0xc0
[   79.854679][ T8439]  do_syscall_64+0xfa/0x3b0
[   79.856749][ T8439]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.858428][ T8439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.860398][ T8439]  ? exc_page_fault+0x9f/0xf0
[   79.861930][ T8439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.863830][ T8439] RIP: 0033:0x7faae858ebe9
[   79.865302][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.872204][ T8439] RSP: 002b:00007faae9437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   79.874926][ T8439] RAX: ffffffffffffffda RBX: 00007faae87b5fa0 RCX: 00007faae858ebe9
[   79.878075][ T8439] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000a
[   79.880592][ T8439] RBP: 00007faae8611e19 R08: 0000000000000000 R09: 0000000000000000
[   79.883114][ T8439] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000000
[   79.885907][ T8439] R13: 00007faae87b6038 R14: 00007faae87b5fa0 R15: 00007fff7947e5d8
[   79.888482][ T8439]  </TASK>
[   79.889506][ T8439] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   79.891790][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.2.913 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[   79.895618][ T8439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.898830][ T8439] Call Trace:
[   79.899928][ T8439]  <TASK>
[   79.900872][ T8439]  dump_stack_lvl+0x99/0x250
[   79.902333][ T8439]  ? __asan_memcpy+0x40/0x70
[   79.903828][ T8439]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.905522][ T8439]  ? __pfx__printk+0x10/0x10
[   79.907015][ T8439]  panic+0x2db/0x790
[   79.908273][ T8439]  ? __pfx_panic+0x10/0x10
[   79.909748][ T8439]  ? show_trace_log_lvl+0x4fb/0x550
[   79.911441][ T8439]  __warn+0x31b/0x4b0
[   79.912756][ T8439]  ? nsim_fib_event_nb+0xed8/0x1080
[   79.914445][ T8439]  ? nsim_fib_event_nb+0xed8/0x1080
[   79.916144][ T8439]  report_bug+0x2be/0x4f0
[   79.917561][ T8439]  ? nsim_fib_event_nb+0xed8/0x1080
[   79.919269][ T8439]  ? nsim_fib_event_nb+0xed8/0x1080
[   79.920980][ T8439]  ? nsim_fib_event_nb+0xeda/0x1080
[   79.922642][ T8439]  handle_bug+0x84/0x160
[   79.924014][ T8439]  exc_invalid_op+0x1a/0x50
[   79.925534][ T8439]  asm_exc_invalid_op+0x1a/0x20
[   79.927122][ T8439] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[   79.929006][ T8439] Code: fa be 02 00 00 00 eb 0a e8 35 26 ad fa be 01 00 00 00 4c 89 f7 e8 58 8b b2 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 19 26 ad fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[   79.935051][ T8439] RSP: 0018:ffffc90002e0ef08 EFLAGS: 00010283
[   79.937003][ T8439] RAX: ffffffff87128a97 RBX: 0000000000000001 RCX: 0000000000080000
[   79.939542][ T8439] RDX: ffffc90008a94000 RSI: 00000000000004af RDI: 00000000000004b0
[   79.942061][ T8439] RBP: dffffc0000000000 R08: ffff888029bdd82f R09: 1ffff1100537bb05
[   79.944598][ T8439] R10: dffffc0000000000 R11: ffffed100537bb06 R12: ffff88801195d000
[   79.947122][ T8439] R13: ffffc90002e0f080 R14: 0000000000000000 R15: ffffc90002e0f098
[   79.949684][ T8439]  ? nsim_fib_event_nb+0xed7/0x1080
[   79.951352][ T8439]  ? nsim_fib_event_nb+0xed7/0x1080
[   79.953055][ T8439]  notifier_call_chain+0x1b6/0x3e0
[   79.954704][ T8439]  ? atomic_notifier_call_chain+0x26/0x180
[   79.956591][ T8439]  atomic_notifier_call_chain+0xda/0x180
[   79.958416][ T8439]  call_fib_notifiers+0x31/0x60
[   79.959996][ T8439]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[   79.962063][ T8439]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[   79.964306][ T8439]  ? inet6_rtm_newroute+0xe8b/0x18c0
[   79.966040][ T8439]  inet6_rtm_newroute+0x12f5/0x18c0
[   79.967724][ T8439]  ? nlmon_xmit+0xb0/0x100
[   79.969175][ T8439]  ? kmem_cache_free+0x18f/0x400
[   79.970765][ T8439]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   79.972569][ T8439]  ? __local_bh_enable_ip+0x12d/0x1c0
[   79.974337][ T8439]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   79.976160][ T8439]  rtnetlink_rcv_msg+0x7cf/0xb70
[   79.977795][ T8439]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   79.979459][ T8439]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   79.981227][ T8439]  ? ref_tracker_free+0x63a/0x7d0
[   79.982872][ T8439]  ? __asan_memcpy+0x40/0x70
[   79.984394][ T8439]  ? __pfx_ref_tracker_free+0x10/0x10
[   79.986134][ T8439]  netlink_rcv_skb+0x208/0x470
[   79.987705][ T8439]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   79.989470][ T8439]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.991184][ T8439]  ? netlink_deliver_tap+0x2e/0x1b0
[   79.992898][ T8439]  netlink_unicast+0x82f/0x9e0
[   79.994479][ T8439]  ? __pfx_netlink_unicast+0x10/0x10
[   79.996177][ T8439]  ? netlink_sendmsg+0x642/0xb30
[   79.997805][ T8439]  ? skb_put+0x11b/0x210
[   79.999181][ T8439]  netlink_sendmsg+0x805/0xb30
[   80.000773][ T8439]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.002485][ T8439]  ? aa_sock_msg_perm+0x94/0x160
[   80.004101][ T8439]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   80.005828][ T8439]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.007532][ T8439]  __sock_sendmsg+0x21c/0x270
[   80.009074][ T8439]  ____sys_sendmsg+0x52d/0x830
[   80.010629][ T8439]  ? __pfx_____sys_sendmsg+0x10/0x10
[   80.012347][ T8439]  ? import_iovec+0x74/0xa0
[   80.013856][ T8439]  ___sys_sendmsg+0x21f/0x2a0
[   80.015502][ T8439]  ? __pfx____sys_sendmsg+0x10/0x10
[   80.017193][ T8439]  ? __fget_files+0x2a/0x420
[   80.018703][ T8439]  ? __fget_files+0x3a0/0x420
[   80.020222][ T8439]  __sys_sendmmsg+0x227/0x430
[   80.021779][ T8439]  ? __pfx___sys_sendmmsg+0x10/0x10
[   80.023477][ T8439]  ? do_futex+0x395/0x420
[   80.024892][ T8439]  ? rcu_is_watching+0x15/0xb0
[   80.026478][ T8439]  __x64_sys_sendmmsg+0xa0/0xc0
[   80.028053][ T8439]  do_syscall_64+0xfa/0x3b0
[   80.029523][ T8439]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.031208][ T8439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.033196][ T8439]  ? exc_page_fault+0x9f/0xf0
[   80.034734][ T8439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.036675][ T8439] RIP: 0033:0x7faae858ebe9
[   80.038139][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.044267][ T8439] RSP: 002b:00007faae9437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   80.046946][ T8439] RAX: ffffffffffffffda RBX: 00007faae87b5fa0 RCX: 00007faae858ebe9
[   80.049483][ T8439] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000a
[   80.052022][ T8439] RBP: 00007faae8611e19 R08: 0000000000000000 R09: 0000000000000000
[   80.054560][ T8439] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000000
[   80.057182][ T8439] R13: 00007faae87b6038 R14: 00007faae87b5fa0 R15: 00007fff7947e5d8
[   80.059889][ T8439]  </TASK>
[   80.061540][ T8439] Kernel Offset: disabled
[   80.062951][ T8439] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:52:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000000c6a4 RDI=000000000000c6a5 RBP=00000000000003f9 RSP=ffffc90002e0e6b0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faae94376c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001340 CR3=000000011022c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=00007faae8787478 00007faae87874c0
XMM06=00007faae87874b8 00007faae87874b0 XMM07=00007faae87874a8 00007faae87874a0
XMM08=0000000000000000 00007faae8612ee7 XMM09=0000000000000000 00007faae8612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=dffffc0000000000 RCX=c29791d59a6f8900 RDX=0000000000000008
RSI=0000000000000001 RDI=ffff88801fb19cc0 RBP=ffff88801fb19cc0 RSP=ffffc900001e0bf8
R8 =ffffffff8fa07bf7 R9 =1ffffffff1f40f7e R10=dffffc0000000000 R11=ffffffff81946980
R12=dffffc0000000000 R13=1ffff11003f6339b R14=ffffffff8db90508 R15=0000000000000001
RIP=ffffffff819469ea RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558794e500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe44db2adb0 CR3=00000001283d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fe44dc12e53
XMM06=0000000000000000 00007fe44dc12e4d XMM07=0000000000000000 00007fe44dc12e61
XMM08=0000000000000000 00007fe44dc12ee7 XMM09=0000000000000000 00007fe44dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
