last executing test programs:

5.656542162s ago: executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=<r2=>r1], 0xd8}}, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000500), &(0x7f00000002c0)=r4}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000680), &(0x7f0000000480)}, 0x20) (async)
r7 = accept4$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c, 0x80000)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r8, &(0x7f0000000980)="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", 0x19a, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x61}, 0x1c) (async)
shutdown(r8, 0x1) (async)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={r10, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000380)={r10, 0xa4, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x9, @private1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x3, @loopback, 0x60000000}, @in6={0xa, 0x4e24, 0x8000, @local, 0x8}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000003c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x42, 0x0, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00020000d484ea2c855a1791d459e01485f76e57a767d52257954892005862f972a24e25c6998f0e94a7ae0d3f5ca84605c27e4b29714105e68be6cd3e5bbef0c2e9f530298dd6dee77fb6da5018c8dd71647651a281649f57b9017d1f80d1f0926ea7ec3fa406b416bcd5cdf45d40df4a4086a5ed3611057257cc8181c9b19014295b81be9f542bb4", @ANYRES16=r12, @ANYRES16=r2], 0x54}}, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = socket$nl_audit(0x10, 0x3, 0x9) (async)
r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$WG_CMD_GET_DEVICE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="27030000000000c4faffffff339e68000100", @ANYRES16=r1, @ANYBLOB], 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfe8, 0x4, 0x2, 0x110, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xb}, 0x48)

5.574306092s ago: executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
socket$inet6(0x10, 0x0, 0x0)

5.3420003s ago: executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000200005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000006f00010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000003400048030000180080001006e617400240002800800064000000017080005400000001608000140000000000800023b000000020900010073797a30000000000900020073797a32"], 0x88}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_type(r1, &(0x7f00000001c0), 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6b, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000000)=""/5, 0x2}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="0400ec000400870088002d800a"], 0x1d4}}, 0x0)

5.158729234s ago: executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = getpid()
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) (async)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000730120000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (rerun: 32)
socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32)
socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32)
epoll_create1(0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000070a010400000000000000000700000985000740d497e12bfd7c628c5694209d9fac0e0a003c0511f565e187c15f552835f6bcbf677b69b089ac7de87ec55a9e5c632fd026200ec727ae1cb36d671fc3053973dc86a10112c48822c7be2f3ed4bbd1cee602b19f683dfee4dcd0e5ee97961c3deabcc371c281e79d56f81524121ae3be821a3f5542d24f256820c6fc32c69a3df7d50000000900010073797a31"], 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x840) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async, rerun: 32)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x26e1, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) (async, rerun: 64)
ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000003c0)={0x0, 0xffffffff, 0x7}) (rerun: 64)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000f7ff00000000000000000000000000000000000003"], 0x58)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

3.187051585s ago: executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f00000049c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELSETELEM={0x1570, 0xe, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1554, 0x3, 0x0, 0x1, [{0x1168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "f681f7b2ebe26dfb6d4e687d337f56b52617ee8a78e1be68cab60b2ce2d68630f1fcbef762b5a774068f7c073d08598fe4709b3c9492c61b9e976fcd1f84b382ba5c41b30759529f361df62d2b746826cbeb26f80d14af0db6833aac8bc969b32af8cf18bb4762d286665d14ba7547fef645b063c4952b0a3f01b051f02bab0b0e1585ca2b2810b94e67e071e247cde241043051771a1f71ea5abf29699f645bea479c74c82236df803f611476733fc415372d4de322d970bb2e0a644ffca3f032856dc0058eb13eec"}]}, @NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "9f83a80e1dd361a4ec581fcdba45b7f6dc08e80891de87b7382ad53eef584d471e05cd133c5fc94d6dad24d06ebcb8efc62270645291548634240be78a02dcc81629894e85e6cede3a7174b71afc34d755c89a6f49b8bba58609afd02ed219eda50a72064fb78f4054b5f0a866145a70ea39e9"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "72c74811f21d0bf964fe90c9d86eb07d0e0ac0166bb05080b1f2218a18cf051dffc40f3f30c6ac900963b9f8e58fca8eb5db4277f7c2bc499f3913d892ebe9c474cbbb1ae9377c91cd0ce947f24917d0150be38410ff2d0556313c5fde133905895dfe6486d259e1d03aed24b2d9d72855d4c17f5a4d1029c86370b240cd53f9dede5c1ca17932c439ec1d565331cb23f239e0c979220d92d76349c2cd8fcfee13f761aa06e8849c35a89f44"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x8c, 0x6, 0x1, 0x0, "7e44c0d44954c04073404fcc8ef69fbe444e7be2dfee12634c884982ed14a4bdc33d8b13219858d26235d8811ccf1752e234456dfabc518a80508dbf5ad7a35ab498b17b28ba7ecdc333b1c62e6175458e6329722d763063bbf0f419c557c740c49ced68dd3ae507c79170242c56b26aff62ce3b437b1b0106fac05e707c8943468fd78d59d0aa38"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x60, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x19c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "08e445ad9b1838f69c47cbd09f802bd6f6c6888984326cd7875b9d4f0d26e9935dfd1c2463f4f9d26ec596de4e565a193e971de2a2659f"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "76dd6e8d2b9c65ed2e4989de1de842c02e822fd5557289fd8c3c473f00f447cbadf87c247b00a1e3c343062b17437e0d27ed572415a7126bd0efc285540e6f9945edb4f9d0a5e053af89954d73b43604de7db3f46a4580f1620b2501f5746caf6669443892793b1360daa718ffe9787ae1b89ac254845c31f8e4ca37ce2f3a2302235979353631c869dd07507bbf80fc098f36fc585edac2bf0b1c1dcb5f0f2aa1597c"}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}]}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101}], {0x14}}, 0x1618}, 0x1, 0x0, 0x0, 0x20008084}, 0xc40)

3.11036852s ago: executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=@del={0xe0, 0x11, 0x1, 0x0, 0x0, {{'rfc7539esp(ofb(tea),blake2s-256-x86)\x00'}, '\x00', '\x00', 0x0, 0x400}}, 0xe0}}, 0x0)
listen(r1, 0x7)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x1000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r5}, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x10}], 0x10}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x14)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
ioctl$TUNSETCARRIER(r7, 0x400454e2, 0x0)
ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000140)=0x1)
ioctl$TUNSETCARRIER(r7, 0x400454e2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.334214821s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000834}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)

1.310122896s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01230000000000000000530000000e0001006e655464657673a73a58d8000f0002006e657464657673696d300000"], 0x34}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x3, 0x1, 0x4, 0x2400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3}, 0x48)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x7}, 0x700)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x22)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x6, r4, 0x1}, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x5, 0x0, 0xfffffffffffffd25)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/135, 0x87, 0x1, &(0x7f0000000180)=""/55, 0x37}, &(0x7f0000000240)=0x40)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
r9 = socket(0xb, 0x2, 0x3ff)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="030a0000000000000000070000000c001700000000000000000008000300", @ANYRES32=r8, @ANYBLOB="0a0400ae47544780ec905d9271cbff7bb7a7f27770616e331000000800050000000000"], 0x3c}}, 0x0)

1.158017643s ago: executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
socket$inet6(0x10, 0x0, 0x0)

1.14922383s ago: executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8}, 0x90)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000940)={'#! ', '', [{0x20, 'string\x00'}, {0x20, 'erspan0\x00'}, {0x20, 'raw\x00'}, {0x20, ']etbios-ns\x00'}, {}, {0x20, 'geneve1\x00'}, {0x20, 'socket\x00'}, {0x20, 'geneve1\x00'}, {0x20, 'string\x00'}]}, 0x49)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"])
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req={0x3fc, 0x0, 0x0, 0x7}, 0x10)
sendmmsg(r3, &(0x7f0000000500), 0x0, 0x920000000000404c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1cc}, 0x1, 0x0, 0x0, 0x80a4}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r5)
unshare(0x400)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000540))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r7, 0x1, {0x1}, 0x1}, 0x18)
connect$rose(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x24}}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x852, 0x32ee39ab, 0x0, 0x3c767e29, 0x6, 0x2], 0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)

1.064025947s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x5a46, 0x7ff, 0x63a0, 0x0, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0)

1.036850693s ago: executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x2b, 0x8e, 0x2, 0x38, 0x1a, @empty, @remote, 0x40, 0x10, 0x6, 0x80000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x20, 0x3f, 0x200, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f", 0x13}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x5e, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0x2}, 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
write(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000c000000050000000000000000000013af000000000000002ce52435f9f38fcda614"], 0x0, 0x29}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

980.17009ms ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f00000049c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELSETELEM={0x15f4, 0xe, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15d8, 0x3, 0x0, 0x1, [{0x1168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "f681f7b2ebe26dfb6d4e687d337f56b52617ee8a78e1be68cab60b2ce2d68630f1fcbef762b5a774068f7c073d08598fe4709b3c9492c61b9e976fcd1f84b382ba5c41b30759529f361df62d2b746826cbeb26f80d14af0db6833aac8bc969b32af8cf18bb4762d286665d14ba7547fef645b063c4952b0a3f01b051f02bab0b0e1585ca2b2810b94e67e071e247cde241043051771a1f71ea5abf29699f645bea479c74c82236df803f611476733fc415372d4de322d970bb2e0a644ffca3f032856dc0058eb13eec"}]}, @NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "9f83a80e1dd361a4ec581fcdba45b7f6dc08e80891de87b7382ad53eef584d471e05cd133c5fc94d6dad24d06ebcb8efc62270645291548634240be78a02dcc81629894e85e6cede3a7174b71afc34d755c89a6f49b8bba58609afd02ed219eda50a72064fb78f4054b5f0a866145a70ea39e9"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "72c74811f21d0bf964fe90c9d86eb07d0e0ac0166bb05080b1f2218a18cf051dffc40f3f30c6ac900963b9f8e58fca8eb5db4277f7c2bc499f3913d892ebe9c474cbbb1ae9377c91cd0ce947f24917d0150be38410ff2d0556313c5fde133905895dfe6486d259e1d03aed24b2d9d72855d4c17f5a4d1029c86370b240cd53f9dede5c1ca17932c439ec1d565331cb23f239e0c979220d92d76349c2cd8fcfee13f761aa06e8849c35a89f44"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x8c, 0x6, 0x1, 0x0, "7e44c0d44954c04073404fcc8ef69fbe444e7be2dfee12634c884982ed14a4bdc33d8b13219858d26235d8811ccf1752e234456dfabc518a80508dbf5ad7a35ab498b17b28ba7ecdc333b1c62e6175458e6329722d763063bbf0f419c557c740c49ced68dd3ae507c79170242c56b26aff62ce3b437b1b0106fac05e707c8943468fd78d59d0aa38"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x60, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x19c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "08e445ad9b1838f69c47cbd09f802bd6f6c6888984326cd7875b9d4f0d26e9935dfd1c2463f4f9d26ec596de4e565a193e971de2a2659f"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "76dd6e8d2b9c65ed2e4989de1de842c02e822fd5557289fd8c3c473f00f447cbadf87c247b00a1e3c343062b17437e0d27ed572415a7126bd0efc285540e6f9945edb4f9d0a5e053af89954d73b43604de7db3f46a4580f1620b2501f5746caf6669443892793b1360daa718ffe9787ae1b89ac254845c31f8e4ca37ce2f3a2302235979353631c869dd07507bbf80fc098f36fc585edac2bf0b1c1dcb5f0f2aa1597c"}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "fd88b68ea8a2624c211b7eb0033d7c6eb07ff31c0cf42561e0f76b9e53ff121d3a3e0d6e4171dcef9f6c93015e66f4effea427cdb55e5cb6e4eab6a1c3c6d4959d08e6667aa81c64aadaf407714aa0b2bcc7826e36863c7db14b6b24d4e5930747badf6bcd3c65af8c5c74dccc1cc15d37dff5b766d4db59a0fce7bef1a35f3673"}]}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101}], {0x14}}, 0x169c}, 0x1, 0x0, 0x0, 0x20008084}, 0xc40)

976.994964ms ago: executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x2b, 0x8e, 0x2, 0x38, 0x1a, @empty, @remote, 0x40, 0x10, 0x6, 0x80000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x20, 0x3f, 0x200, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f", 0x13}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x5e, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {0x0}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
write(r0, 0x0, 0x0)

938.055339ms ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
listen(0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000002240), &(0x7f0000002280)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x26, 0x80, 0x1, @private0, @local, 0x0, 0x0, 0x9}})
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)

907.61275ms ago: executing program 1:
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@null, 0x0, 'wg0\x00'})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
getpeername$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, &(0x7f0000000280)=0x6e)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x64, 0x19, 0x400, 0x9271, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_LIM_HOPS={0x5, 0xd, 0x9}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1}, {0x0, 0x1, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x2}, {0x2, 0x1, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "8c8b341afdd58af3"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "c39ee2e6eea49e95"}, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000b40)={0x0, 0xd, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, 0x7, 0x6, 0x801, 0xa00, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x19b5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0)

702.272641ms ago: executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x101, 0xffc, 0x7}, 0x48)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r0=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000001880)="0245bf56", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r0, 0x1, 0x0, 0x6, @local}, 0x14)
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x360, 0x11, 0x148, 0x360, 0x10, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x1be6, 0x80}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x528)
bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000000850000207b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000611250000000000095000000000000009a29cb8b5c1eb2b65a3b89fe404972c75122e8da58d72be3fc0758d0e732a39b100bd6debd50ecc672a49134cc3f07d954c02fa5897f7e438a6950692c728efe67a42d1c261c70d02ce10b6a9bcdedfae5cc05967778e1fbf4741969876beaadd34c83f7bfc7b8ff9ecf09bfee57f7fbc796791204cc0b73f9b20d9631785398ae6026293d87ee0cfc0906600807016519ed588fd9f6a0bd4130839ddf5c9c442268e474a7e9d3de67f4aa614db6653ed52361412fae30045ae21a6af2f728a57485ee629cc66327dffe568ced6ac25d0b18a08de85d9aee69b7e89fc2d02f3faa4f13"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x8d, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48)
r3 = epoll_create1(0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
sendto$inet6(r5, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0x9)

699.459681ms ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x101, 0xffc, 0x7}, 0x48)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000001880)="0245bf56", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x360, 0x11, 0x148, 0x360, 0x10, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x1be6, 0x80}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x528)
bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000000850000207b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x8d, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48)
r5 = epoll_create1(0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x10000000})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_crypto(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100000001400017d"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000005a027b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
sendto$inet6(r7, &(0x7f0000000000)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0x9)

675.123742ms ago: executing program 1:
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ac01000016000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000ac000700e000000100"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000008000b0000000000"], 0x1ac}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000910000000000000095c038f19a000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000300)=[@mss, @mss, @timestamp, @timestamp, @window, @timestamp, @window, @sack_perm], 0x8)
sendto$inet(r3, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000002e80), 0x1001)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000003000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000006200000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x4c)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0)
sendmmsg$inet(r3, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c0945a285ed531c7034e5f9c5d5edd102a9c9bb3fa294dbaefa3b579b193eb03ffb9c43c8cca93eb435d8bcf97f8c3fa6", 0x31}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000000000000000070000001c"], 0x78}}], 0x1, 0x40805)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x6, {0x2, 0x4e23, @multicast2}, 'veth1_vlan\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})

565.545922ms ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01230000000000000000530000000e0001006e655464657673a73a58d8000f0002006e657464657673696d300000"], 0x34}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x3, 0x1, 0x4, 0x2400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3}, 0x48)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x7}, 0x700)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x22)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x6, r4, 0x1}, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x5, 0x0, 0xfffffffffffffd25)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/135, 0x87, 0x1, &(0x7f0000000180)=""/55, 0x37}, &(0x7f0000000240)=0x40)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
r9 = socket(0xb, 0x2, 0x3ff)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="030a0000000000000000070000000c001700000000000000000008000300", @ANYRES32=r8, @ANYBLOB="0a0400ae47544780ec905d9271cbff7bb7a7f27770616e331000000800050000000000"], 0x3c}}, 0x0)

405.528281ms ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000200005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000006f00010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000003400048030000180080001006e617400240002800800064000000017080005400000001608000140000000000800023b000000020900010073797a30000000000900020073797a32"], 0x88}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_type(r1, &(0x7f00000001c0), 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6b, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0x246258ead3289b6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}}}]}}]}, 0x6c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000000)=""/5, 0x2}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="0400ec000400870088002d800a"], 0x1d4}}, 0x0)

373.237218ms ago: executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x2b, 0x8e, 0x2, 0x38, 0x1a, @empty, @remote, 0x40, 0x10, 0x6, 0x80000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x20, 0x3f, 0x200, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f", 0x13}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x5e, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000940)=[{0x0}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
write(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000c000000050000000000000000000013af000000000000002ce52435f9f38fcda614"], 0x0, 0x29}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

297.882738ms ago: executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f140100000000000000000008000100000000000c0045"], 0x24}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x60ff, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

267.997684ms ago: executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
socket$inet6(0x10, 0x0, 0x0)

173.317401ms ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={<r2=>r1, 0x7, 0x20}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5dd}}, 0x948, 0x2}, &(0x7f0000000140)=0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x9c) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x905, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000240)="ed", 0x1}], 0x1}}], 0x1, 0x0)

108.882678ms ago: executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f00000049c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELSETELEM={0x15f4, 0xe, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15d8, 0x3, 0x0, 0x1, [{0x1168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "f681f7b2ebe26dfb6d4e687d337f56b52617ee8a78e1be68cab60b2ce2d68630f1fcbef762b5a774068f7c073d08598fe4709b3c9492c61b9e976fcd1f84b382ba5c41b30759529f361df62d2b746826cbeb26f80d14af0db6833aac8bc969b32af8cf18bb4762d286665d14ba7547fef645b063c4952b0a3f01b051f02bab0b0e1585ca2b2810b94e67e071e247cde241043051771a1f71ea5abf29699f645bea479c74c82236df803f611476733fc415372d4de322d970bb2e0a644ffca3f032856dc0058eb13eec"}]}, @NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "9f83a80e1dd361a4ec581fcdba45b7f6dc08e80891de87b7382ad53eef584d471e05cd133c5fc94d6dad24d06ebcb8efc62270645291548634240be78a02dcc81629894e85e6cede3a7174b71afc34d755c89a6f49b8bba58609afd02ed219eda50a72064fb78f4054b5f0a866145a70ea39e9"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "72c74811f21d0bf964fe90c9d86eb07d0e0ac0166bb05080b1f2218a18cf051dffc40f3f30c6ac900963b9f8e58fca8eb5db4277f7c2bc499f3913d892ebe9c474cbbb1ae9377c91cd0ce947f24917d0150be38410ff2d0556313c5fde133905895dfe6486d259e1d03aed24b2d9d72855d4c17f5a4d1029c86370b240cd53f9dede5c1ca17932c439ec1d565331cb23f239e0c979220d92d76349c2cd8fcfee13f761aa06e8849c35a89f44"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x8c, 0x6, 0x1, 0x0, "7e44c0d44954c04073404fcc8ef69fbe444e7be2dfee12634c884982ed14a4bdc33d8b13219858d26235d8811ccf1752e234456dfabc518a80508dbf5ad7a35ab498b17b28ba7ecdc333b1c62e6175458e6329722d763063bbf0f419c557c740c49ced68dd3ae507c79170242c56b26aff62ce3b437b1b0106fac05e707c8943468fd78d59d0aa38"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x60, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x19c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "08e445ad9b1838f69c47cbd09f802bd6f6c6888984326cd7875b9d4f0d26e9935dfd1c2463f4f9d26ec596de4e565a193e971de2a2659f"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "76dd6e8d2b9c65ed2e4989de1de842c02e822fd5557289fd8c3c473f00f447cbadf87c247b00a1e3c343062b17437e0d27ed572415a7126bd0efc285540e6f9945edb4f9d0a5e053af89954d73b43604de7db3f46a4580f1620b2501f5746caf6669443892793b1360daa718ffe9787ae1b89ac254845c31f8e4ca37ce2f3a2302235979353631c869dd07507bbf80fc098f36fc585edac2bf0b1c1dcb5f0f2aa1597c"}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "fd88b68ea8a2624c211b7eb0033d7c6eb07ff31c0cf42561e0f76b9e53ff121d3a3e0d6e4171dcef9f6c93015e66f4effea427cdb55e5cb6e4eab6a1c3c6d4959d08e6667aa81c64aadaf407714aa0b2bcc7826e36863c7db14b6b24d4e5930747badf6bcd3c65af8c5c74dccc1cc15d37dff5b766d4db59a0fce7bef1a35f3673"}]}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101}], {0x14}}, 0x169c}, 0x1, 0x0, 0x0, 0x20008084}, 0xc40)

84.944359ms ago: executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2d, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

35.182493ms ago: executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x80080400)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r5, 0x801, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffff, @media='ib\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5], 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4010)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r5, 0x90a, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0xfcd, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4002804)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r6, 0x10d, 0xdb, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
close(r1)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000480)={0x3, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, {{0x2, 0x4e21, @local}}]}, 0x210)
preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

21.914704ms ago: executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x2b, 0x8e, 0x2, 0x38, 0x1a, @empty, @remote, 0x40, 0x10, 0x6, 0x80000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x20, 0x3f, 0x200, r2, 0x6, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f", 0x13}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x5e, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
write(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000c000000050000000000000000000013af000000000000002ce52435f9f38fcda614"], 0x0, 0x29}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

0s ago: executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r2=>0x0, 0x2b, 0x8e, 0x2, 0x38, 0x1a, @empty, @remote, 0x40, 0x10, 0x6, 0x80000000}})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x20, 0x3f, 0x200, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f", 0x13}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x5e, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {0x0}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts.
2024/06/22 09:43:12 fuzzer started
2024/06/22 09:43:13 dialing manager at 10.128.0.169:30018
[   56.947699][ T5090] cgroup: Unknown subsys name 'net'
[   57.091154][ T5090] cgroup: Unknown subsys name 'rlimit'
2024/06/22 09:43:14 starting 5 executor processes
[   58.205408][ T5089] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.237516][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.246458][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.253806][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.254998][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.265006][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.277720][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.285856][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.286686][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   59.293668][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.301034][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.308575][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.322253][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.323696][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.330210][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.337441][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.344520][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.351580][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.358429][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   59.365283][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.371767][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.378826][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   59.395773][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.395870][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.403821][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   59.410155][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   59.417067][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.423918][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.431814][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.439621][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   59.453730][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   59.976622][ T5110] chnl_net:caif_netlink_parms(): no params data found
[   60.086418][ T5111] chnl_net:caif_netlink_parms(): no params data found
[   60.115817][ T5108] chnl_net:caif_netlink_parms(): no params data found
[   60.133572][ T5109] chnl_net:caif_netlink_parms(): no params data found
[   60.235896][ T5112] chnl_net:caif_netlink_parms(): no params data found
[   60.311225][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.318624][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.325992][ T5110] bridge_slave_0: entered allmulticast mode
[   60.333852][ T5110] bridge_slave_0: entered promiscuous mode
[   60.349931][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.357054][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.364529][ T5110] bridge_slave_1: entered allmulticast mode
[   60.371358][ T5110] bridge_slave_1: entered promiscuous mode
[   60.485973][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.493253][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.500719][ T5111] bridge_slave_0: entered allmulticast mode
[   60.507447][ T5111] bridge_slave_0: entered promiscuous mode
[   60.522360][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.536402][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.556220][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.563477][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.571010][ T5109] bridge_slave_0: entered allmulticast mode
[   60.577823][ T5109] bridge_slave_0: entered promiscuous mode
[   60.585911][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.593278][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.603419][ T5109] bridge_slave_1: entered allmulticast mode
[   60.610465][ T5109] bridge_slave_1: entered promiscuous mode
[   60.617230][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.624584][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.631916][ T5111] bridge_slave_1: entered allmulticast mode
[   60.639016][ T5111] bridge_slave_1: entered promiscuous mode
[   60.677301][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.684713][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.692715][ T5108] bridge_slave_0: entered allmulticast mode
[   60.701918][ T5108] bridge_slave_0: entered promiscuous mode
[   60.757430][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.764849][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.772597][ T5108] bridge_slave_1: entered allmulticast mode
[   60.779928][ T5108] bridge_slave_1: entered promiscuous mode
[   60.788708][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.809988][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.819519][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.826648][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.835172][ T5112] bridge_slave_0: entered allmulticast mode
[   60.842237][ T5112] bridge_slave_0: entered promiscuous mode
[   60.854558][ T5110] team0: Port device team_slave_0 added
[   60.863734][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.885830][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.897292][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.917139][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.925310][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.932799][ T5112] bridge_slave_1: entered allmulticast mode
[   60.940606][ T5112] bridge_slave_1: entered promiscuous mode
[   60.948928][ T5110] team0: Port device team_slave_1 added
[   60.985361][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.048012][ T5109] team0: Port device team_slave_0 added
[   61.069445][ T5111] team0: Port device team_slave_0 added
[   61.076307][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.086422][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.113174][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.127561][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.138474][ T5109] team0: Port device team_slave_1 added
[   61.156907][ T5111] team0: Port device team_slave_1 added
[   61.163605][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.171039][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.196999][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.217711][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.258513][ T5108] team0: Port device team_slave_0 added
[   61.284424][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.292859][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.319729][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.349274][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.356245][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.382635][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.395910][ T5108] team0: Port device team_slave_1 added
[   61.398991][ T5125] Bluetooth: hci3: command tx timeout
[   61.422950][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.430007][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.456699][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.471601][ T5112] team0: Port device team_slave_0 added
[   61.484125][ T5125] Bluetooth: hci0: command tx timeout
[   61.490118][ T5115] Bluetooth: hci2: command tx timeout
[   61.498910][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.505865][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.531881][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.558607][ T5125] Bluetooth: hci4: command tx timeout
[   61.564410][ T5115] Bluetooth: hci1: command tx timeout
[   61.578762][ T5112] team0: Port device team_slave_1 added
[   61.592091][ T5110] hsr_slave_0: entered promiscuous mode
[   61.599831][ T5110] hsr_slave_1: entered promiscuous mode
[   61.661706][ T5111] hsr_slave_0: entered promiscuous mode
[   61.669168][ T5111] hsr_slave_1: entered promiscuous mode
[   61.675604][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.684145][ T5111] Cannot create hsr debugfs directory
[   61.702717][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.710039][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.736201][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.756944][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.764172][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.790681][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.820552][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.827517][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.854143][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.877972][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.885559][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.912123][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.012339][ T5109] hsr_slave_0: entered promiscuous mode
[   62.021566][ T5109] hsr_slave_1: entered promiscuous mode
[   62.027612][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.035645][ T5109] Cannot create hsr debugfs directory
[   62.120621][ T5112] hsr_slave_0: entered promiscuous mode
[   62.130285][ T5112] hsr_slave_1: entered promiscuous mode
[   62.136399][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.144011][ T5112] Cannot create hsr debugfs directory
[   62.185938][ T5108] hsr_slave_0: entered promiscuous mode
[   62.192332][ T5108] hsr_slave_1: entered promiscuous mode
[   62.200311][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.207876][ T5108] Cannot create hsr debugfs directory
[   62.514676][ T5111] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.542829][ T5111] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.556793][ T5111] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.581460][ T5111] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.621096][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.653945][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.664074][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.674484][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.747743][ T5112] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.761694][ T5112] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.780647][ T5112] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.792364][ T5112] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.897394][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.926732][ T5108] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.942773][ T5108] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.954733][ T5108] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.966585][ T5108] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.021060][ T5111] 8021q: adding VLAN 0 to HW filter on device team0
[   63.075282][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.082673][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.096212][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.103328][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.191210][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.203986][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.247612][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.262762][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.282232][ T5110] 8021q: adding VLAN 0 to HW filter on device team0
[   63.299071][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.309151][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.342211][ T5112] 8021q: adding VLAN 0 to HW filter on device team0
[   63.362704][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.369871][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.394119][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.401291][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.429546][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.436676][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.460149][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.467273][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.481060][ T5115] Bluetooth: hci3: command tx timeout
[   63.559032][ T5115] Bluetooth: hci2: command tx timeout
[   63.559329][ T5125] Bluetooth: hci0: command tx timeout
[   63.602523][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.638876][ T5125] Bluetooth: hci1: command tx timeout
[   63.638884][ T5115] Bluetooth: hci4: command tx timeout
[   63.696924][ T5108] 8021q: adding VLAN 0 to HW filter on device team0
[   63.756430][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.763603][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.776846][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.784022][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.846984][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.912541][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.933546][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.980869][ T5109] 8021q: adding VLAN 0 to HW filter on device team0
[   64.054813][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.061997][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.090515][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.097669][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.223079][ T5111] veth0_vlan: entered promiscuous mode
[   64.266376][ T5111] veth1_vlan: entered promiscuous mode
[   64.277861][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.310348][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.325225][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.418082][ T5111] veth0_macvtap: entered promiscuous mode
[   64.517529][ T5108] veth0_vlan: entered promiscuous mode
[   64.553149][ T5111] veth1_macvtap: entered promiscuous mode
[   64.566002][ T5112] veth0_vlan: entered promiscuous mode
[   64.586830][ T5108] veth1_vlan: entered promiscuous mode
[   64.597431][ T5110] veth0_vlan: entered promiscuous mode
[   64.635412][ T5112] veth1_vlan: entered promiscuous mode
[   64.652980][ T5110] veth1_vlan: entered promiscuous mode
[   64.671805][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.714381][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.742269][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.792583][ T5112] veth0_macvtap: entered promiscuous mode
[   64.804382][ T5112] veth1_macvtap: entered promiscuous mode
[   64.815052][ T5110] veth0_macvtap: entered promiscuous mode
[   64.831840][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.842428][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.856638][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.868633][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.901130][ T5110] veth1_macvtap: entered promiscuous mode
[   64.944404][ T5108] veth0_macvtap: entered promiscuous mode
[   64.980409][ T5108] veth1_macvtap: entered promiscuous mode
[   65.014019][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.035630][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.047216][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.056589][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.068901][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.081289][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.092173][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.103530][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.114218][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.124874][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.139441][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.167860][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.182105][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.192857][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.204093][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.215507][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.226958][ T5112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.236253][ T5112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.247737][ T5112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.256827][ T5112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.293835][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.308867][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.319357][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.330146][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.340037][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.351081][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.362344][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.374360][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.384331][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.393181][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.408093][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.436955][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.452114][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.462473][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.473302][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.483460][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.495630][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.506536][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.521959][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.532919][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.556177][ T5108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.565727][ T5115] Bluetooth: hci3: command tx timeout
[   65.565795][ T5108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.581728][ T5108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.590809][ T5108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.638667][ T5115] Bluetooth: hci0: command tx timeout
[   65.638700][ T5125] Bluetooth: hci2: command tx timeout
[   65.670384][  T557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.680100][  T557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.718580][ T5125] Bluetooth: hci1: command tx timeout
[   65.719152][ T5115] Bluetooth: hci4: command tx timeout
[   65.787683][ T5109] veth0_vlan: entered promiscuous mode
[   65.814992][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.832283][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.901075][ T5109] veth1_vlan: entered promiscuous mode
[   65.926663][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.940284][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.000066][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.021377][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.087309][ T5109] veth0_macvtap: entered promiscuous mode
[   66.109014][ T5109] veth1_macvtap: entered promiscuous mode
[   66.144191][  T557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.180313][  T557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.220066][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.236055][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.267366][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.276431][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.287807][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.300698][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.311601][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.322291][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.332416][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.343950][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.354674][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.365586][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.377511][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.387959][ T5200] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.427823][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.462997][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.488497][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.499658][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.509702][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.521994][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.532002][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.542614][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.549749][ T5203] ieee802154 phy0 wpan0: encryption failed: -22
[   66.554419][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.631947][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.673427][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.699951][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.722554][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.017511][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.047093][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.117213][ T5210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[   67.156694][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.215851][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.224084][ T5229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.345927][ T5229] netlink: 860 bytes leftover after parsing attributes in process `syz-executor.1'.
[   67.534380][ T5239] ieee802154 phy0 wpan0: encryption failed: -22
[   67.642605][ T5115] Bluetooth: hci3: command tx timeout
[   67.718409][ T5115] Bluetooth: hci0: command tx timeout
[   67.718482][ T5125] Bluetooth: hci2: command tx timeout
[   67.762734][ T5245] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   67.778961][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[   67.799605][ T5125] Bluetooth: hci4: command tx timeout
[   67.801936][ T5115] Bluetooth: hci1: command tx timeout
[   67.928965][   T29] audit: type=1804 audit(1719049404.329:2): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir422021447/syzkaller.IlpGa5/3/memory.events" dev="sda1" ino=1966 res=1 errno=0
[   68.000767][   T29] audit: type=1804 audit(1719049404.349:3): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir422021447/syzkaller.IlpGa5/3/memory.events" dev="sda1" ino=1966 res=1 errno=0
[   68.066632][   T29] audit: type=1804 audit(1719049404.389:4): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir422021447/syzkaller.IlpGa5/3/memory.events" dev="sda1" ino=1966 res=1 errno=0
[   68.474980][ T5277] ieee802154 phy0 wpan0: encryption failed: -22
[   68.626668][ T5287] netlink: 860 bytes leftover after parsing attributes in process `syz-executor.2'.
[   68.664462][ T5290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   68.976771][ T5296] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[   69.084799][ T5300] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[   69.479407][ T5315] Zero length message leads to an empty skb
[   69.591932][ T5319] ieee802154 phy0 wpan0: encryption failed: -22
[   69.798824][ T5334] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.0'.
[   69.872347][ T5338] netlink: 860 bytes leftover after parsing attributes in process `syz-executor.2'.
[   70.075241][ T5345] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE.
[   70.206220][ T5351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   70.300245][ T5353] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[   70.917551][ T5374] ieee802154 phy0 wpan0: encryption failed: -22
[   70.992349][ T5378] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.093203][ T5378] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[   71.723371][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[   71.729878][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[   72.307340][ T5436] __nla_validate_parse: 2 callbacks suppressed
[   72.307354][ T5436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[   72.806602][ T5454] netlink: 860 bytes leftover after parsing attributes in process `syz-executor.0'.
[   73.817958][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   73.857008][ T5498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[   74.154634][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   75.292048][ T5555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[   76.020142][ T5571] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[   76.327352][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[   76.549589][ T5595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[   76.862542][   T45] cfg80211: failed to load regulatory.db
[   77.387787][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   78.182700][ T5653] x_tables: duplicate underflow at hook 3
[   78.365555][ T5661] sit0: entered allmulticast mode
[   78.403028][ T5651] sit0: entered promiscuous mode
[   79.192248][ T5702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   79.305777][ T5708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[   80.299035][ T5756] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   80.320459][ T5756] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   80.429897][ T5760] Illegal XDP return value 4294945127 on prog  (id 54) dev N/A, expect packet loss!
[   80.797582][ T5780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   80.833352][ T5784] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   81.392264][ T5798] syzkaller0: entered promiscuous mode
[   81.415151][ T5798] syzkaller0: entered allmulticast mode
[   82.081747][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   82.821356][ T5802] tc_dump_action: action bad kind
[   83.243418][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.792340][ T5888] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   84.339887][   T29] audit: type=1804 audit(1719049420.759:5): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir271029901/syzkaller.a6TySv/42/memory.events" dev="sda1" ino=1947 res=1 errno=0
[   84.418128][   T29] audit: type=1804 audit(1719049420.789:6): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir271029901/syzkaller.a6TySv/42/memory.events" dev="sda1" ino=1947 res=1 errno=0
[   84.501364][   T29] audit: type=1804 audit(1719049420.799:7): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir271029901/syzkaller.a6TySv/42/memory.events" dev="sda1" ino=1947 res=1 errno=0
[   84.764059][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   84.837004][ T5935] syz-executor.4[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.837148][ T5935] syz-executor.4[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   86.156030][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   86.310671][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   87.129423][ T6061] ipip0: entered promiscuous mode
[   87.848355][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   88.205006][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   88.290081][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   88.303448][ T6128] netlink: 'syz-executor.4': attribute type 13 has an invalid length.
[   88.323771][ T6128] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.332922][ T6128] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.341740][ T6128] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.350596][ T6128] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.372641][ T6128] vxlan0: entered promiscuous mode
[   88.511942][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   88.807812][ T6154] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[   88.824195][ T6154] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'.
[   88.836986][ T6154] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[   88.856722][ T6154] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[   88.866535][ T6154] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[   89.057439][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[   89.437534][ T6188] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[   89.536442][ T6195] tun0: tun_chr_ioctl cmd 1074025677
[   89.541949][ T6195] tun0: linktype set to 6
[   89.547769][ T6195] tun0: tun_chr_ioctl cmd 1074025698
[   89.556536][ T6195] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[   89.573694][ T6195] team0: Cannot enslave team device to itself
[   90.593663][ T6260] netlink: 83 bytes leftover after parsing attributes in process `syz-executor.2'.
[   90.668669][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   90.776391][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   90.821788][ T6275] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   90.940757][ T6284] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
[   91.189379][ T6297] syz-executor.4[6297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.189527][ T6297] syz-executor.4[6297] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   91.604472][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.684813][ T6326] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   91.757390][ T6326] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.885103][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[   91.930981][ T6345] gtp0: entered promiscuous mode
[   91.952358][ T6345] gtp0: entered allmulticast mode
[   92.415359][ T6374] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   92.932702][   T29] audit: type=1804 audit(1719049429.349:8): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1145079704/syzkaller.FX4Cb4/81/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[   93.011245][   T29] audit: type=1804 audit(1719049429.409:9): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3127946173/syzkaller.7OZ8cY/68/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0
[   93.197554][ T6427] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   93.241237][   T62] wlan1: Trigger new scan to find an IBSS to join
[   93.843027][ T6462] netlink: 'syz-executor.2': attribute type 24 has an invalid length.
[   94.117012][ T6482] __nla_validate_parse: 7 callbacks suppressed
[   94.117031][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[   94.146278][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[   94.164154][ T6482] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   94.198415][  T557] wlan1: Trigger new scan to find an IBSS to join
[   94.199884][ T6482] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.2'.
[   94.205153][   T62] wlan1: Trigger new scan to find an IBSS to join
[   94.393536][ T6491] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2097153 (only 8 groups)
[   94.397460][ T6495] sctp: [Deprecated]: syz-executor.4 (pid 6495) Use of int in max_burst socket option deprecated.
[   94.397460][ T6495] Use struct sctp_assoc_value instead
[   94.445877][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   94.910690][ T6525] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'.
[   94.929376][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[   95.017309][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   95.048981][ T6530] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   95.141514][ T6530] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.1'.
[   95.155856][ T6538] sctp: [Deprecated]: syz-executor.3 (pid 6538) Use of int in max_burst socket option deprecated.
[   95.155856][ T6538] Use struct sctp_assoc_value instead
[   95.172417][   T62] wlan1: Trigger new scan to find an IBSS to join
[   95.273934][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   95.525137][ T6554] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[   95.966908][ T6584] sctp: [Deprecated]: syz-executor.2 (pid 6584) Use of int in max_burst socket option deprecated.
[   95.966908][ T6584] Use struct sctp_assoc_value instead
[   95.997362][ T6579] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   96.201754][ T2452] wlan1: Trigger new scan to find an IBSS to join
[   96.309831][ T6605] ebt_among: dst integrity fail: 200
[   96.314293][ T6606] ebt_among: dst integrity fail: 200
[   96.325221][ T6605] netlink: 'syz-executor.2': attribute type 64 has an invalid length.
[   96.727681][ T6638] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   96.897290][ T6644] sctp: [Deprecated]: syz-executor.3 (pid 6644) Use of int in max_burst socket option deprecated.
[   96.897290][ T6644] Use struct sctp_assoc_value instead
[   96.954207][ T6640] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[   96.974112][ T6640] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   97.053944][ T6641] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.161542][  T557] wlan1: Trigger new scan to find an IBSS to join
[   97.232014][ T6640] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   97.242294][ T2452] wlan1: Trigger new scan to find an IBSS to join
[   97.364537][ T6664] bridge0: port 3(gretap0) entered blocking state
[   97.382184][ T6664] bridge0: port 3(gretap0) entered disabled state
[   97.391480][ T6664] gretap0: entered allmulticast mode
[   97.403522][ T6664] gretap0: entered promiscuous mode
[   97.424609][ T6664] bridge0: port 3(gretap0) entered blocking state
[   97.431492][ T6664] bridge0: port 3(gretap0) entered forwarding state
[   97.741586][ T6686] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   97.805412][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.814729][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.147254][ T6710] tipc: Invalid UDP bearer configuration
[   98.147308][ T6710] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[   98.191785][ T6712] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[   98.207675][   T11] wlan1: Trigger new scan to find an IBSS to join
[   98.249386][  T557] wlan1: Creating new IBSS network, BSSID 46:5d:21:03:cf:f9
[   98.501306][ T6732] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   98.864968][ T6755] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[   99.090910][  T557] wlan1: Creating new IBSS network, BSSID c6:41:05:4b:ab:08
[   99.160145][ T2928] wlan1: Creating new IBSS network, BSSID 5e:04:68:13:2d:c4
[   99.185682][ T6779] __nla_validate_parse: 16 callbacks suppressed
[   99.185695][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   99.217375][ T6779] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[   99.411066][ T6786] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[   99.424703][ T6786] openvswitch: netlink: ERSPAN option length err (len 3060, max 255).
[   99.753833][ T6805] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.3'.
[   99.821421][ T6805] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[   99.994853][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  100.031785][ T6815] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  100.049887][ T6820] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'.
[  100.085162][ T6815] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.2'.
[  100.198519][   T62] wlan1: Trigger new scan to find an IBSS to join
[  100.596981][ T6852] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.3'.
[  100.633142][ T6852] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  100.756065][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  100.811959][ T6859] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  100.894106][ T6859] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
[  101.068220][ T6875] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  101.098784][   T62] wlan1: Creating new IBSS network, BSSID 52:92:31:ff:b1:47
[  101.497345][ T6900] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  101.637373][ T6912] bridge0: port 3(gretap0) entered blocking state
[  101.645641][ T6912] bridge0: port 3(gretap0) entered disabled state
[  101.653255][ T6912] gretap0: entered allmulticast mode
[  101.673933][ T6912] gretap0: entered promiscuous mode
[  101.681348][ T6912] bridge0: port 3(gretap0) entered blocking state
[  101.687946][ T6912] bridge0: port 3(gretap0) entered forwarding state
[  101.695760][ T6914] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  102.146615][ T6930] Bluetooth: MGMT ver 1.22
[  102.152877][ T6930] Bluetooth: hci3: service_discovery: expected 1988 bytes, got 7 bytes
[  102.413778][ T6948] xt_hashlimit: max too large, truncated to 1048576
[  102.527842][ T6952] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  103.289751][ T7007] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  103.536773][ T7021] xt_hashlimit: max too large, truncated to 1048576
[  103.832479][ T7030] dummy0: entered promiscuous mode
[  103.848883][ T7030] macvlan2: entered allmulticast mode
[  103.861056][ T7030] dummy0: entered allmulticast mode
[  103.875901][ T7030] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  103.932523][ T7030] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  103.970037][ T7035] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.203012][ T7046] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  104.271838][ T7055] netem: unknown loss type 8
[  104.277893][ T7055] netem: change failed
[  104.293523][ T7046] __nla_validate_parse: 9 callbacks suppressed
[  104.293540][ T7046] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.1'.
[  104.476873][ T7069] xt_hashlimit: max too large, truncated to 1048576
[  104.760350][ T7078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  105.154856][ T7095] ip6gretap0: entered promiscuous mode
[  105.196025][ T7095] batadv_slave_0: entered promiscuous mode
[  105.207786][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  105.228092][ T7107] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  105.292101][ T7107] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.0'.
[  105.430310][ T7112] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  105.464729][ T7112] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  105.764643][ T7133] xt_hashlimit: max too large, truncated to 1048576
[  105.891207][ T7139] Bluetooth: MGMT ver 1.22
[  106.059810][ T7148] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'.
[  106.089940][ T7146] ip6gretap0: entered promiscuous mode
[  106.169179][ T7146] batadv_slave_0: entered promiscuous mode
[  106.277057][ T7146] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  106.352167][ T7146] Cannot create hsr debugfs directory
[  106.373028][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  106.544414][ T7162] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  107.350734][ T7204] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[  107.391371][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.436099][ T7204] Êüä^q: entered promiscuous mode
[  107.455411][ T7207] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  107.461777][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  107.582793][ T7214] xt_hashlimit: max too large, truncated to 1048576
[  107.616378][ T7212] ip6gretap0: entered promiscuous mode
[  107.636617][ T7212] batadv_slave_0: entered promiscuous mode
[  107.663238][ T7212] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  107.679339][ T7212] Cannot create hsr debugfs directory
[  108.282893][ T7250] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  108.366333][ T7257] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it!
[  108.529388][ T7264] xt_hashlimit: max too large, truncated to 1048576
[  108.697589][ T7268] ip6gretap0: entered promiscuous mode
[  108.749632][ T7268] batadv_slave_0: entered promiscuous mode
[  108.816055][ T7268] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  108.862462][ T7268] Cannot create hsr debugfs directory
[  109.192318][ T7298] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  109.362311][ T7310] __nla_validate_parse: 4 callbacks suppressed
[  109.362328][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  109.412102][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  109.517308][ T7316] xt_hashlimit: max too large, truncated to 1048576
[  109.544196][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  109.737104][ T7324] ip6gretap0: entered promiscuous mode
[  109.767392][ T7324] batadv_slave_0: entered promiscuous mode
[  109.791153][ T7324] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  109.809242][ T7324] Cannot create hsr debugfs directory
[  109.907462][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  109.966452][ T7336] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  110.003725][ T7336] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.157716][ T7352] xt_hashlimit: max too large, truncated to 1048576
[  110.509183][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  110.535195][ T7374] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  110.558857][ T7374] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.2'.
[  110.746600][ T7388] xt_hashlimit: max too large, truncated to 1048576
[  111.031596][ T7406] tipc: Can't bind to reserved service type 1
[  111.255323][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  111.301684][ T7420] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  111.332250][ T7420] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
[  111.444828][ T7430] xt_hashlimit: max too large, truncated to 1048576
[  111.583332][ T7439] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  111.664590][ T7431] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003
[  111.917880][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  111.934608][ T7464] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  112.072044][ T7472] xt_hashlimit: max too large, truncated to 1048576
[  112.433050][ T7493] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available
[  112.442291][   T57] IPVS: starting estimator thread 0...
[  112.526314][ T7496] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  112.550367][ T7494] IPVS: using max 20 ests per chain, 48000 per kthread
[  112.629437][ T7503] xt_hashlimit: max too large, truncated to 1048576
[  112.680217][ T7506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  112.687832][ T7506] IPv6: NLM_F_CREATE should be set when creating new route
[  112.921816][ T7520] team_slave_1: mtu less than device minimum
[  113.285337][ T7543] xt_TCPMSS: Only works on TCP SYN packets
[  113.295790][ T7544] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  113.386896][ T7548] xt_hashlimit: max too large, truncated to 1048576
[  113.407597][ T7547] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  113.991331][ T7577] batadv0: entered promiscuous mode
[  114.107623][ T7586] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  114.146216][ T7594] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  114.315761][ T7605] xt_hashlimit: max too large, truncated to 1048576
[  114.979502][ T7639] __nla_validate_parse: 16 callbacks suppressed
[  114.979521][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  115.015357][ T7641] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  115.106180][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  115.123594][ T7645] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  115.134656][ T7645] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.2'.
[  115.431467][ T7663] xt_hashlimit: max too large, truncated to 1048576
[  115.712127][ T7673] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  115.805246][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  115.830723][ T7680] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  115.846849][ T7680] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'.
[  116.053458][ T7695] tipc: Started in network mode
[  116.068248][ T7695] tipc: Node identity fe8, cluster identity 4711
[  116.084907][ T7695] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  116.124252][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  116.140504][ T7707] xt_hashlimit: max too large, truncated to 1048576
[  116.157751][ T7705] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.2'.
[  116.311023][ T7714] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  116.536983][ T7727] SET target dimension over the limit!
[  116.543777][ T7738] SET target dimension over the limit!
[  116.586997][ T7743] xt_hashlimit: max too large, truncated to 1048576
[  117.425659][ T7783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.594999][ T7797] xt_hashlimit: max too large, truncated to 1048576
[  117.753888][ T7783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.199399][ T2452] wlan1: Trigger new scan to find an IBSS to join
[  118.531406][ T7783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.586903][ T7816] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  118.725951][ T7783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.912567][ T7828] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  118.961588][ T7783] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.003863][ T7832] xt_hashlimit: max too large, truncated to 1048576
[  119.005328][ T7783] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.051119][ T7783] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.076296][ T7783] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.383422][ T7850] pim6reg1: entered promiscuous mode
[  119.400857][ T7850] pim6reg1: entered allmulticast mode
[  119.794527][ T7889] xt_hashlimit: max too large, truncated to 1048576
[  120.113378][ T7897] syz-executor.1[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.113518][ T7897] syz-executor.1[7897] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.216820][ T7903] __nla_validate_parse: 25 callbacks suppressed
[  120.216834][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  120.261611][ T7903] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.1'.
[  120.647983][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  120.685020][ T7931] xt_hashlimit: max too large, truncated to 1048576
[  120.723106][ T7934] xt_hashlimit: max too large, truncated to 1048576
[  121.119201][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  121.144905][ T7947] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'.
[  121.199428][ T7952] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.238585][   T11] wlan1: Trigger new scan to find an IBSS to join
[  121.465394][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  121.688221][ T7982] xt_hashlimit: max too large, truncated to 1048576
[  121.698717][ T7983] xt_hashlimit: max too large, truncated to 1048576
[  121.970052][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  122.027093][ T7992] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'.
[  122.178642][   T11] wlan1: Creating new IBSS network, BSSID 6a:a5:9f:88:d7:43
[  122.384891][ T8018] 
[  122.387234][ T8018] ======================================================
[  122.394242][ T8018] WARNING: possible circular locking dependency detected
[  122.401247][ T8018] 6.10.0-rc4-syzkaller-00837-g3226607302ca #0 Not tainted
[  122.408342][ T8018] ------------------------------------------------------
[  122.415356][ T8018] syz-executor.4/8018 is trying to acquire lock:
[  122.421676][ T8018] ffffffff8f5e6f48 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0
[  122.430755][ T8018] 
[  122.430755][ T8018] but task is already holding lock:
[  122.438122][ T8018] ffff88807b564150 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50
[  122.448237][ T8018] 
[  122.448237][ T8018] which lock already depends on the new lock.
[  122.448237][ T8018] 
[  122.458623][ T8018] 
[  122.458623][ T8018] the existing dependency chain (in reverse order) is:
[  122.467621][ T8018] 
[  122.467621][ T8018] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}:
[  122.476219][ T8018]        lock_acquire+0x1ed/0x550
[  122.481238][ T8018]        __mutex_lock+0x136/0xd70
[  122.486601][ T8018]        smc_switch_to_fallback+0x35/0xd00
[  122.492404][ T8018]        smc_sendmsg+0x11f/0x530
[  122.497341][ T8018]        __sock_sendmsg+0x221/0x270
[  122.502529][ T8018]        __sys_sendto+0x3a4/0x4f0
[  122.507542][ T8018]        __x64_sys_sendto+0xde/0x100
[  122.512818][ T8018]        do_syscall_64+0xf3/0x230
[  122.517842][ T8018]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.524254][ T8018] 
[  122.524254][ T8018] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  122.531897][ T8018]        lock_acquire+0x1ed/0x550
[  122.536910][ T8018]        lock_sock_nested+0x48/0x100
[  122.542184][ T8018]        do_ip_setsockopt+0x1a2d/0x3cd0
[  122.547723][ T8018]        ip_setsockopt+0x63/0x100
[  122.552755][ T8018]        do_sock_setsockopt+0x3af/0x720
[  122.558289][ T8018]        __sys_setsockopt+0x1ae/0x250
[  122.563647][ T8018]        __x64_sys_setsockopt+0xb5/0xd0
[  122.569182][ T8018]        do_syscall_64+0xf3/0x230
[  122.574199][ T8018]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.580605][ T8018] 
[  122.580605][ T8018] -> #0 (rtnl_mutex){+.+.}-{3:3}:
[  122.587806][ T8018]        validate_chain+0x18e0/0x5900
[  122.593170][ T8018]        __lock_acquire+0x1346/0x1fd0
[  122.598526][ T8018]        lock_acquire+0x1ed/0x550
[  122.603536][ T8018]        __mutex_lock+0x136/0xd70
[  122.608551][ T8018]        do_ip_setsockopt+0x127d/0x3cd0
[  122.614172][ T8018]        ip_setsockopt+0x63/0x100
[  122.619194][ T8018]        smc_setsockopt+0x275/0xe50
[  122.624470][ T8018]        do_sock_setsockopt+0x3af/0x720
[  122.630002][ T8018]        __sys_setsockopt+0x1ae/0x250
[  122.635360][ T8018]        __x64_sys_setsockopt+0xb5/0xd0
[  122.640893][ T8018]        do_syscall_64+0xf3/0x230
[  122.645908][ T8018]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.652315][ T8018] 
[  122.652315][ T8018] other info that might help us debug this:
[  122.652315][ T8018] 
[  122.662526][ T8018] Chain exists of:
[  122.662526][ T8018]   rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock
[  122.662526][ T8018] 
[  122.676070][ T8018]  Possible unsafe locking scenario:
[  122.676070][ T8018] 
[  122.683503][ T8018]        CPU0                    CPU1
[  122.688854][ T8018]        ----                    ----
[  122.694198][ T8018]   lock(&smc->clcsock_release_lock);
[  122.699557][ T8018]                                lock(sk_lock-AF_INET);
[  122.706479][ T8018]                                lock(&smc->clcsock_release_lock);
[  122.714359][ T8018]   lock(rtnl_mutex);
[  122.718328][ T8018] 
[  122.718328][ T8018]  *** DEADLOCK ***
[  122.718328][ T8018] 
[  122.726452][ T8018] 1 lock held by syz-executor.4/8018:
[  122.731804][ T8018]  #0: ffff88807b564150 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50
[  122.742336][ T8018] 
[  122.742336][ T8018] stack backtrace:
[  122.748215][ T8018] CPU: 0 PID: 8018 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0
[  122.758607][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  122.768655][ T8018] Call Trace:
[  122.771923][ T8018]  <TASK>
[  122.774844][ T8018]  dump_stack_lvl+0x241/0x360
[  122.779521][ T8018]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.784718][ T8018]  ? print_circular_bug+0x130/0x1a0
[  122.789912][ T8018]  check_noncircular+0x36a/0x4a0
[  122.794841][ T8018]  ? __pfx_validate_chain+0x10/0x10
[  122.800030][ T8018]  ? __pfx_check_noncircular+0x10/0x10
[  122.805479][ T8018]  ? lockdep_lock+0x123/0x2b0
[  122.810145][ T8018]  ? __pfx_validate_chain+0x10/0x10
[  122.815333][ T8018]  validate_chain+0x18e0/0x5900
[  122.820185][ T8018]  ? __pfx_validate_chain+0x10/0x10
[  122.825397][ T8018]  ? validate_chain+0x11e/0x5900
[  122.830414][ T8018]  ? __pfx_lock_acquire+0x10/0x10
[  122.835430][ T8018]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  122.841747][ T8018]  ? mark_lock+0x9a/0x350
[  122.846068][ T8018]  __lock_acquire+0x1346/0x1fd0
[  122.850927][ T8018]  lock_acquire+0x1ed/0x550
[  122.855424][ T8018]  ? do_ip_setsockopt+0x127d/0x3cd0
[  122.860618][ T8018]  ? __pfx_lock_acquire+0x10/0x10
[  122.865631][ T8018]  ? __pfx___might_resched+0x10/0x10
[  122.870907][ T8018]  ? mark_lock+0x9a/0x350
[  122.875244][ T8018]  ? __lock_acquire+0x1346/0x1fd0
[  122.880275][ T8018]  __mutex_lock+0x136/0xd70
[  122.884780][ T8018]  ? do_ip_setsockopt+0x127d/0x3cd0
[  122.889996][ T8018]  ? do_ip_setsockopt+0x127d/0x3cd0
[  122.895219][ T8018]  ? __pfx___mutex_lock+0x10/0x10
[  122.900249][ T8018]  ? __mutex_trylock_common+0x183/0x2e0
[  122.905795][ T8018]  ? __pfx___might_resched+0x10/0x10
[  122.911087][ T8018]  do_ip_setsockopt+0x127d/0x3cd0
[  122.916122][ T8018]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  122.921494][ T8018]  ? __mutex_lock+0x2ef/0xd70
[  122.926178][ T8018]  ? __pfx___might_resched+0x10/0x10
[  122.931468][ T8018]  ? smc_setsockopt+0x1c3/0xe50
[  122.936319][ T8018]  ? __pfx___mutex_lock+0x10/0x10
[  122.941345][ T8018]  ip_setsockopt+0x63/0x100
[  122.945858][ T8018]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  122.951755][ T8018]  smc_setsockopt+0x275/0xe50
[  122.956460][ T8018]  ? __pfx_smc_setsockopt+0x10/0x10
[  122.961676][ T8018]  ? aa_sock_opt_perm+0x79/0x120
[  122.966622][ T8018]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  122.972158][ T8018]  ? security_socket_setsockopt+0x87/0xb0
[  122.977878][ T8018]  ? __pfx_smc_setsockopt+0x10/0x10
[  122.983085][ T8018]  do_sock_setsockopt+0x3af/0x720
[  122.988113][ T8018]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  122.993659][ T8018]  ? __fget_files+0x29/0x470
[  122.998245][ T8018]  ? __fget_files+0x3f6/0x470
[  123.002922][ T8018]  __sys_setsockopt+0x1ae/0x250
[  123.007768][ T8018]  __x64_sys_setsockopt+0xb5/0xd0
[  123.013353][ T8018]  do_syscall_64+0xf3/0x230
[  123.017856][ T8018]  ? clear_bhb_loop+0x35/0x90
[  123.022536][ T8018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.028442][ T8018] RIP: 0033:0x7f6d4a27d0a9
[  123.032863][ T8018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  123.052481][ T8018] RSP: 002b:00007f6d4b0d40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  123.060901][ T8018] RAX: ffffffffffffffda RBX: 00007f6d4a3b3f80 RCX: 00007f6d4a27d0a9
[  123.068954][ T8018] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000007
[  123.076916][ T8018] RBP: 00007f6d4a2ec074 R08: 0000000000000210 R09: 0000000000000000
2024/06/22 09:44:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  123.084883][ T8018] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000000
[  123.092849][ T8018] R13: 000000000000000b R14: 00007f6d4a3b3f80 R15: 00007ffdf1191bf8
[  123.100842][ T8018]  </TASK>