last executing test programs:

5.323009022s ago: executing program 0 (id=834):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x22c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x81}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xf4000}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40044)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

5.254740682s ago: executing program 0 (id=835):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4) (async)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000080)) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22)
recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x70, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_AF_SPEC={0x48, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x5}, {0x8, 0x0, 0x0, 0x0, 0xf}, {0x8, 0x18, 0x0, 0x0, 0x1c0}, {0x8, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x4, 0x0, 0x0, 0x3}]}}, @AF_BRIDGE={0x4}]}, @IFLA_CARRIER={0x5, 0x21, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x12, 0x0, @void}, 0x10)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0xd, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socket$inet(0x2, 0x6, 0x7fff)

5.18478902s ago: executing program 0 (id=836):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) (async)
sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) (rerun: 32)

4.635059437s ago: executing program 2 (id=839):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x88}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

4.503699488s ago: executing program 2 (id=840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
clock_gettime(0x0, &(0x7f0000000480)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {r2, r3/1000+60000}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00 \x00'}}, 0x48}}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000780)='ext4_ext_show_extent\x00', r0, 0x0, 0x2}, 0xfffffffffffffea8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0182c200000208004500001c000000008002907800000000e000030400009078006400d2"], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x40084)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)
listen(r4, 0x0)
unshare(0x6050000)

4.502140853s ago: executing program 2 (id=841):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYRES64=r0], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4002}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x8}, @fwd={0x2}]}, {0x0, [0x5f, 0x0, 0x30]}}, &(0x7f00000000c0)=""/6, 0x35, 0x6, 0x0, 0x800, 0x10000, @value=r3}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.40928732s ago: executing program 2 (id=843):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
socket$netlink(0x10, 0x3, 0x4) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="220001ff0000000071101900000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) (async)
write$tun(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="831900000000000000000019", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async)
close(r3)
close(r2) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d61746368000000240e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140000000110800024000000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_rdma(0x10, 0x3, 0x14)

4.287728929s ago: executing program 1 (id=844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r3, @ANYRES32=r3], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r7, 0x1, 0x7}, 0x14)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, r7, {0xc3}, {}, {0xe, 0xc}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r10, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

4.049021364s ago: executing program 0 (id=845):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000098d79d9d66000b008ec737cbdf8e00000000000003000000180100002020007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000ff03000000100000850000000600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x36, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x4, 0x71, 0x10, 0x19}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=<r6=>0x0)
bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
close(r3)
close(r2)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0xa0}}, 0x40000)
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001114000100000000000000000800030002000000080001000000000006004f000100"], 0x28}, 0x1, 0x0, 0x0, 0x4851}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9)

2.287366282s ago: executing program 1 (id=846):
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x175}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3f096d47}, 0x1c)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
socket$inet6(0xa, 0x3, 0x7) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x175}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) (async)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) (async)
socket(0x40000000015, 0x5, 0x0) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3f096d47}, 0x1c) (async)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async)
accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)

700.399734ms ago: executing program 1 (id=847):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async, rerun: 32)
unshare(0x6a040000) (async, rerun: 32)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
unshare(0x2c060000) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (rerun: 32)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0914000600626f6e64300000000000000003000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0xb8, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:gpg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x890}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x1e8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1b8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x1e8}}, 0x2000c800) (async)
socket$netlink(0x10, 0x3, 0x0)

488.521142ms ago: executing program 0 (id=848):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '[#-/),\\\x8b\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0)

146.983917ms ago: executing program 1 (id=849):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x18, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201210000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "9010495f5d634c13d83584e91fcae4f3"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe96, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0)
clock_gettime(0x3, &(0x7f0000000380))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x3}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x18, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201210000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) (async)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "9010495f5d634c13d83584e91fcae4f3"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40010) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe96, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0) (async)
clock_gettime(0x3, &(0x7f0000000380)) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x3}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)

84.014497ms ago: executing program 2 (id=850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYBLOB], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f", @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)

82.785478ms ago: executing program 0 (id=851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=r1, @ANYBLOB="83000400cb1507002000128008000100736974001400790d08000300ac1414100500090000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

3.702457ms ago: executing program 1 (id=852):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r0, &(0x7f0000001540)="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", 0x1000, 0x40000, 0x0, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
close(r4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x1, 0x8000, 0x3, 0xeb020004, 0x519, 0x8, 0x3ff, <r6=>r5}, &(0x7f0000000240)=0x20)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r6, 0x3}, &(0x7f0000000280)=0x8)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@delchain={0x410, 0x65, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xd, 0x10}, {0x7, 0x13}, {0x5, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x82e7}, @filter_kind_options=@f_basic={{0xa}, {0x3d8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_BASIC_ACT={0x340, 0x3, [@m_skbedit={0xdc, 0x1c, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x9, 0x10000000, 0x0, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x7d, 0x6, "b73ad9a32af8840cca2d520d1025ecbab8d738fc066b6c0ae4fb8b3a7c81b31f55c13ad136a59db05f1f3ececb360074c04fd14b8ed65d4c8027e24940affad1501e89f7cae3944d2cbbd314d370b95215c7b39233af6ce09164d08c4c0cf18a523a1b8d0de6c4c3171653302b4b060c4da34a420073795b42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xe0, 0x3, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x6, 0x4, 0x2, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x401, 0x8, 0x4, 0xe2f0}, 0xdfa9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0xffff, 0x7, 0xd, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xa, 0x3, 0xdb88, 0x1000}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0xfffffffffffffff1, 0x4, 0xc}, 0x9}}]}, {0x21, 0x6, "111c6006be529b6b6852914b4ecc11de9e25a26a2b63b5b30b653eef74"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x180, 0x19, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x8, 0x8000, 0xdc}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x0, 0xffffffffffffffff, 0x8, 0x100}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xa, 0x64123633f83bd274, 0x4, 0x9}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0xf, 0x400, 0x3}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x101, 0x4, 0xff, 0x4}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x447, 0x1, 0xa, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x2, 0xa, 0x71}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x93, 0x5, 0x5, 0x7}, 0x3, r10}}]}, {0x53, 0x6, "df77a77528150d3a5a28fb6fbb1114205edc3389a2ba1a9fc64bf03d376ab59aa63090c4cb775991bd2b2d2eb0101b4b713920e1ec1b6c4e0c0c01ba74dfd0119d3d77ca4b6a3ec0dac00b8beb3e1a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}]}, @TCA_BASIC_POLICE={0x8c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0xffffffffeffffffe, 0xe, 0xfffffffb, 0x3, {0x57, 0x2, 0xe, 0xfffa, 0x6f, 0x40}, {0x0, 0x2, 0x1, 0x738, 0xcba8, 0x8}, 0x6e16, 0x6, 0x7fffffff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x6, 0x1d, 0x1, 0x0, {0x11, 0x1, 0x9, 0x0, 0x4, 0xfffffff7}, {0xfb, 0x1, 0x1, 0x2, 0x6, 0x9}, 0x7, 0x6, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}]}]}}]}, 0x410}}, 0x24040084)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

1.625288ms ago: executing program 2 (id=853):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socket$inet6(0xa, 0x1, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 1 (id=854):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffe64) (async)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffe64)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'pim6reg0\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095841818ded6522cc3c7d40ade19edc47f5cbfabc9bd72d202f09ac14981199cf297071378cad7373b62f11788d7c8754777dac46730a23b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80050000000000000022fe0a0189f16d73c0e798"], 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002adbdf2501000000080001000000000064a1637c0f471b26f1fec167cd1272d036b03bfc396b5ab606475c9a42d92059338eae6dd7f4461e4a131d2e683f1a06adbbae80f62f53680c04e9bf658a9af08c25412a904e7efad6993cc5c706dabe11bf0681dadf5908ba32429a95b2e8e08a8c6720a16727356bdb0ccd95b4203806f85809c378211cf211673e2134c5f667ed06a983e0cc242160780c", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x2, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x2, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="2c000000000b010300000000000000000200000a08000240f3ffffff0d000100727066696c74657200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) (async)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="2c000000000b010300000000000000000200000a08000240f3ffffff0d000100727066696c74657200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0x3, 0x1}, {0x2, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3) (async)
close(0x3)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28529' (ED25519) to the list of known hosts.
syzkaller login: [   41.939481][ T5813] cgroup: Unknown subsys name 'net'
[   42.049389][ T5813] cgroup: Unknown subsys name 'cpuset'
[   42.053714][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.643213][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.862845][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.865314][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.868047][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.870898][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.874641][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.877397][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.886707][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.889627][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.897207][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.902451][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.904994][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.907759][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.910833][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.913722][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.916771][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.131281][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   47.168189][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   47.183799][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   47.211425][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.214051][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.216484][ T5839] bridge_slave_0: entered allmulticast mode
[   47.219333][ T5839] bridge_slave_0: entered promiscuous mode
[   47.232016][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.234273][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.237672][ T5839] bridge_slave_1: entered allmulticast mode
[   47.240040][ T5839] bridge_slave_1: entered promiscuous mode
[   47.284056][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.288311][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.295739][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.298450][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.301505][ T5848] bridge_slave_0: entered allmulticast mode
[   47.304329][ T5848] bridge_slave_0: entered promiscuous mode
[   47.316770][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.319547][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.321792][ T5843] bridge_slave_0: entered allmulticast mode
[   47.324032][ T5843] bridge_slave_0: entered promiscuous mode
[   47.326829][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.329691][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.332483][ T5848] bridge_slave_1: entered allmulticast mode
[   47.335682][ T5848] bridge_slave_1: entered promiscuous mode
[   47.339891][ T5839] team0: Port device team_slave_0 added
[   47.349719][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.351940][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.354203][ T5843] bridge_slave_1: entered allmulticast mode
[   47.357459][ T5843] bridge_slave_1: entered promiscuous mode
[   47.365352][ T5839] team0: Port device team_slave_1 added
[   47.389090][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.393374][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.396705][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.398914][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.407472][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.412189][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.416920][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.420716][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.422832][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.431483][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.462007][ T5843] team0: Port device team_slave_0 added
[   47.465904][ T5843] team0: Port device team_slave_1 added
[   47.469146][ T5848] team0: Port device team_slave_0 added
[   47.476248][ T5848] team0: Port device team_slave_1 added
[   47.500330][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.502895][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.511145][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.521964][ T5839] hsr_slave_0: entered promiscuous mode
[   47.524397][ T5839] hsr_slave_1: entered promiscuous mode
[   47.528076][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.530890][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.541004][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.545366][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.547996][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.556779][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.561340][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.563676][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.573082][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.618446][ T5843] hsr_slave_0: entered promiscuous mode
[   47.620706][ T5843] hsr_slave_1: entered promiscuous mode
[   47.622787][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   47.624570][ T5843] Cannot create hsr debugfs directory
[   47.628463][ T5848] hsr_slave_0: entered promiscuous mode
[   47.631005][ T5848] hsr_slave_1: entered promiscuous mode
[   47.633343][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   47.635338][ T5848] Cannot create hsr debugfs directory
[   47.762056][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.774069][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.781449][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.800740][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.812753][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.822163][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.826621][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.836355][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.846184][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.848956][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.851397][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.853582][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.869451][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.873732][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.878763][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.883197][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.905083][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.907499][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.910284][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.913019][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.927915][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.930288][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.932897][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.935332][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.965032][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.988752][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.991845][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.994914][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.998817][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.001470][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.004405][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.013624][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   48.023249][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.028250][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.030482][ T1932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.038383][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.040671][ T1932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.052089][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.068356][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   48.085683][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.090586][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.098343][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   48.109546][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.111795][ T1932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.115729][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.118213][ T1932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.122176][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.124292][ T1932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.128250][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.130556][ T1932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.156358][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.161338][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.238853][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.273395][ T5839] veth0_vlan: entered promiscuous mode
[   48.281764][ T5839] veth1_vlan: entered promiscuous mode
[   48.296899][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.311408][ T5839] veth0_macvtap: entered promiscuous mode
[   48.320204][ T5839] veth1_macvtap: entered promiscuous mode
[   48.323847][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.341632][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.347800][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.358336][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.362521][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.374473][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.377850][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.392792][ T5843] veth0_vlan: entered promiscuous mode
[   48.400552][ T5848] veth0_vlan: entered promiscuous mode
[   48.412757][ T5843] veth1_vlan: entered promiscuous mode
[   48.425448][ T1932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.430686][ T5848] veth1_vlan: entered promiscuous mode
[   48.433084][ T1932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.453000][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.455669][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.456282][ T5843] veth0_macvtap: entered promiscuous mode
[   48.473001][ T5848] veth0_macvtap: entered promiscuous mode
[   48.478057][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.480228][ T5843] veth1_macvtap: entered promiscuous mode
[   48.492702][ T5848] veth1_macvtap: entered promiscuous mode
[   48.512956][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.521546][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.529956][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.535249][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.544536][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.550144][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.553662][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.568325][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.575318][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.583450][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.605270][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.619890][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.664111][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.675630][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.696843][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.699931][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.726053][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.730268][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.757656][ T5913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.770964][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.774256][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.857017][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.863278][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.892125][ T5926] bond1: entered promiscuous mode
[   48.894012][ T5926] bond1: entered allmulticast mode
[   48.899668][ T5926] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.947037][ T5846] Bluetooth: hci1: command tx timeout
[   48.948529][   T54] Bluetooth: hci2: command tx timeout
[   48.948986][ T5846] Bluetooth: hci0: command tx timeout
[   51.026521][ T5846] Bluetooth: hci0: command tx timeout
[   51.026629][ T5849] Bluetooth: hci2: command tx timeout
[   51.028438][ T5846] Bluetooth: hci1: command tx timeout
[   51.862195][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.864651][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.889131][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.893169][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.968972][ T5872] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.973805][ T5872] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.983890][ T5931] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1'.
[   51.990378][ T5931] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1'.
[   51.994436][ T5931] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1'.
[   51.999714][ T5931] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1'.
[   52.002669][ T5872] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.012666][ T5931] Zero length message leads to an empty skb
[   52.015077][ T5872] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.070123][ T5939] pim6reg1: entered promiscuous mode
[   52.072102][ T5939] pim6reg1: entered allmulticast mode
[   52.854367][ T5948] syz_tun: entered allmulticast mode
[   52.872320][ T5948] syz_tun: left allmulticast mode
[   53.090219][ T5974] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   53.106968][ T5849] Bluetooth: hci2: command tx timeout
[   53.107877][   T54] Bluetooth: hci1: command tx timeout
[   53.109182][ T5846] Bluetooth: hci0: command tx timeout
[   53.158571][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'.
[   53.200043][ T5979] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17'.
[   53.317676][ T5989] netlink: 'syz.2.21': attribute type 6 has an invalid length.
[   53.378791][ T5996] tipc: Started in network mode
[   53.380781][ T5996] tipc: Node identity b683241ea105, cluster identity 4711
[   53.383642][ T5996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.389329][ T5997] netlink: 'syz.0.24': attribute type 2 has an invalid length.
[   53.392972][ T5996] syzkaller0: entered promiscuous mode
[   53.395326][ T5996] syzkaller0: entered allmulticast mode
[   53.413274][ T5996] syz_tun: mtu greater than device maximum
[   53.430050][ T5994] tipc: Resetting bearer <eth:syzkaller0>
[   53.438091][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   53.438442][ T5994] tipc: Disabling bearer <eth:syzkaller0>
[   53.447263][ T5998] hsr_slave_0: left promiscuous mode
[   53.450073][ T5998] hsr_slave_1: left promiscuous mode
[   53.516865][ T6004] netlink: 'syz.2.25': attribute type 1 has an invalid length.
[   53.521871][ T6004] netlink: 'syz.2.25': attribute type 1 has an invalid length.
[   53.547876][ T6000] raw_sendmsg: syz.0.24 forgot to set AF_INET. Fix it!
[   53.710135][ T6005] infiniband syz1: set down
[   53.713034][ T6005] infiniband syz1: added macvlan1
[   53.724044][ T6005] syz1: rxe_create_cq: returned err = -12
[   53.735539][ T6005] infiniband syz1: Couldn't create ib_mad CQ
[   53.741559][ T6005] infiniband syz1: Couldn't open port 1
[   53.767522][ T6005] RDS/IB: syz1: added
[   53.770299][ T6005] smc: adding ib device syz1 with port count 1
[   53.772897][ T6005] smc:    ib device syz1 port 1 has pnetid 
[   53.951117][ T6024] tipc: Started in network mode
[   53.953420][ T6024] tipc: Node identity 42f982014ff9, cluster identity 4711
[   53.956745][ T6024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.965467][ T6023] tipc: Resetting bearer <eth:syzkaller0>
[   54.019721][ T6023] tipc: Disabling bearer <eth:syzkaller0>
[   54.325851][ T6052] __nla_validate_parse: 1 callbacks suppressed
[   54.325862][ T6052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'.
[   54.333349][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   54.449202][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.482728][ T6064] IPv6: sit2: Disabled Multicast RS
[   54.513729][ T6070] netlink: 'syz.0.38': attribute type 13 has an invalid length.
[   54.516545][ T6070] netlink: 'syz.0.38': attribute type 17 has an invalid length.
[   54.566111][ T6070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.657254][ T6070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.660688][ T6087] syz.2.43 uses obsolete (PF_INET,SOCK_PACKET)
[   54.663805][ T6087] syzkaller1: entered promiscuous mode
[   54.666156][ T6087] syzkaller1: entered allmulticast mode
[   54.720732][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.913652][ T6095] netlink: 844 bytes leftover after parsing attributes in process `syz.1.46'.
[   55.186565][ T5849] Bluetooth: hci1: command tx timeout
[   55.186652][ T5846] Bluetooth: hci2: command tx timeout
[   55.188913][ T5849] Bluetooth: hci0: command tx timeout
[   55.767994][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'.
[   55.774440][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   55.934052][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'.
[   55.978259][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   56.070451][ T6136] bridge_slave_0: left allmulticast mode
[   56.072489][ T6136] bridge_slave_0: left promiscuous mode
[   56.074444][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'.
[   56.078803][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.087496][ T6136] bridge_slave_1: left allmulticast mode
[   56.089459][ T6136] bridge_slave_1: left promiscuous mode
[   56.091475][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.098855][ T6136] bond0: (slave bond_slave_0): Releasing backup interface
[   56.102168][ T6136] bond0: (slave bond_slave_1): Releasing backup interface
[   56.106138][ T6136] team0: Port device team_slave_0 removed
[   56.110422][ T6136] team0: Port device team_slave_1 removed
[   56.112543][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.115633][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.141681][ T6141] netlink: 348 bytes leftover after parsing attributes in process `syz.1.57'.
[   56.551982][ T6155] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   56.597903][ T6159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.170883][ T6171] netlink: 256 bytes leftover after parsing attributes in process `syz.1.67'.
[   57.209443][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.480330][ T6175] block nbd0: not configured, cannot reconfigure
[   57.645032][ T6202] netlink: 'syz.1.75': attribute type 13 has an invalid length.
[   57.650818][ T6202] netlink: 'syz.1.75': attribute type 17 has an invalid length.
[   57.705811][ T6202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.825933][ T6211] syzkaller1: entered promiscuous mode
[   57.832124][ T6211] syzkaller1: entered allmulticast mode
[   57.984809][ T6221] netlink: 'syz.2.80': attribute type 6 has an invalid length.
[   57.996019][ T6217] syzkaller1: entered promiscuous mode
[   58.001498][ T6217] syzkaller1: entered allmulticast mode
[   58.013061][ T6221] netlink: 'syz.2.80': attribute type 12 has an invalid length.
[   58.134052][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.137278][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.180164][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.187174][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.276580][ T5872] syzkaller0: tun_net_xmit 76
[   58.278494][ T5872] syzkaller0: tun_net_xmit 48
[   58.280530][ T6228] tipc: Enabling of bearer <eth:sjzkaller0> rejected, failed to enable media
[   58.291395][ T6241] IPv6: sit3: Disabled Multicast RS
[   58.296608][   T51] syzkaller0: tun_net_xmit 76
[   58.308281][   T12] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[   58.430214][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.433091][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.436059][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.566351][ T6251] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   58.813174][ T6257] IPv6: sit1: Disabled Multicast RS
[   58.878965][ T6259] validate_nla: 1 callbacks suppressed
[   58.878995][ T6259] netlink: 'syz.0.90': attribute type 10 has an invalid length.
[   58.885351][ T6259] team0: entered allmulticast mode
[   58.887429][ T6259] team_slave_0: entered allmulticast mode
[   58.889531][ T6259] team_slave_1: entered allmulticast mode
[   58.933353][ T6262] netlink: 'syz.0.91': attribute type 6 has an invalid length.
[   58.969961][ T6262] netlink: 'syz.0.91': attribute type 12 has an invalid length.
[   59.131708][ T6269] bridge_slave_0: left allmulticast mode
[   59.137922][ T6269] bridge_slave_0: left promiscuous mode
[   59.140330][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.144496][ T6269] bridge_slave_1: left allmulticast mode
[   59.150330][ T6269] bridge_slave_1: left promiscuous mode
[   59.153971][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.159708][ T6269] bond0: (slave bond_slave_0): Releasing backup interface
[   59.163743][ T6269] bond0: (slave bond_slave_1): Releasing backup interface
[   59.170151][ T6269] team0: Port device team_slave_0 removed
[   59.173512][ T6269] team0: Port device team_slave_1 removed
[   59.176044][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.182422][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.198513][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.201394][ T6272] 8021q: adding VLAN 0 to HW filter on device team0
[   59.205815][ T6272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.246600][ T6274] netlink: 'syz.1.96': attribute type 3 has an invalid length.
[   59.329517][ T6281] __nla_validate_parse: 6 callbacks suppressed
[   59.329531][ T6281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'.
[   59.426234][ T6292] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.438810][ T6295] netlink: 'syz.2.103': attribute type 6 has an invalid length.
[   60.426298][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.429542][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.477371][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.483959][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.535354][ T6312] bond1: left promiscuous mode
[   60.538361][ T6312] bond1: left allmulticast mode
[   60.566923][ T5906] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.570598][ T5857] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.574137][ T5857] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.590380][ T5857] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.610659][ T6338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.693735][    C0] Illegal XDP return value 16128 on prog  (id 34) dev lo, expect packet loss!
[   60.724790][ T6348] netlink: 360 bytes leftover after parsing attributes in process `syz.0.113'.
[   61.128612][ T6361] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   61.290798][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'.
[   61.294108][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'.
[   61.305762][ T6375] bond2: entered promiscuous mode
[   61.307976][ T6375] bond2: entered allmulticast mode
[   61.309838][ T6375] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.612335][ T6396] netlink: 'syz.1.127': attribute type 16 has an invalid length.
[   61.615551][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'.
[   61.672696][ T6401] netlink: 'syz.1.127': attribute type 16 has an invalid length.
[   61.683633][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'.
[   61.877613][ T6407] macsec0: entered promiscuous mode
[   61.879966][ T6407] macsec0: entered allmulticast mode
[   61.883859][ T6407] veth1_macvtap: entered allmulticast mode
[   61.889506][ T6407] macsec0: left promiscuous mode
[   61.891729][ T6407] macsec0: left allmulticast mode
[   61.893851][ T6407] veth1_macvtap: left allmulticast mode
[   61.975309][ T6411] netlink: 'syz.0.130': attribute type 6 has an invalid length.
[   61.983940][ T6411] netlink: 'syz.0.130': attribute type 12 has an invalid length.
[   61.987747][ T6411] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.130'.
[   62.205791][ T6432] IPv6: sit3: Disabled Multicast RS
[   62.210394][ T6432] sit3: entered allmulticast mode
[   62.302740][ T6434] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[   62.311843][ T6434] netlink: 5 bytes leftover after parsing attributes in process `syz.0.136'.
[   62.324190][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[   62.328666][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   62.332187][ T6434] netlink: 'syz.0.136': attribute type 18 has an invalid length.
[   62.691091][   T24] cfg80211: failed to load regulatory.db
[   62.839585][ T6442] team0: Port device sit3 added
[   63.030078][ T5309] hid-generic 0005:0B57:0000.0001: collection stack underflow
[   63.036135][ T5309] hid-generic 0005:0B57:0000.0001: item 0 0 0 12 parsing failed
[   63.042293][ T5309] hid-generic 0005:0B57:0000.0001: probe with driver hid-generic failed with error -22
[   63.128411][ T6463] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.147737][ T6463] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   63.151610][ T6463] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[   63.157902][ T6463] bond1: (slave macvlan2): Releasing backup interface
[   63.234065][ T6476] rdma_rxe: rxe_newlink: failed to add macvlan1
[   63.237097][ T6477] rdma_rxe: rxe_newlink: failed to add macvlan1
[   63.442855][ T6498] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   63.622826][ T6519] syzkaller1: entered promiscuous mode
[   63.624616][ T6519] syzkaller1: entered allmulticast mode
[   64.062425][ T6545] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   64.139546][ T6552] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   64.141942][ T6552] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   64.144368][ T6552] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   64.317832][ T6564] IPv6: sit5: Disabled Multicast RS
[   64.373436][ T6566] __nla_validate_parse: 13 callbacks suppressed
[   64.373447][ T6566] netlink: 52 bytes leftover after parsing attributes in process `syz.2.177'.
[   64.378579][ T6566] netlink: 672 bytes leftover after parsing attributes in process `syz.2.177'.
[   64.418054][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'.
[   64.423021][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'.
[   64.591772][ T6592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.179'.
[   64.749746][ T6597] validate_nla: 1 callbacks suppressed
[   64.749757][ T6597] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[   64.754092][ T6597] netlink: 232 bytes leftover after parsing attributes in process `syz.0.184'.
[   64.758744][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   64.816565][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'.
[   64.819878][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'.
[   64.830748][ T6608] bond3: entered promiscuous mode
[   64.832780][ T6608] bond3: entered allmulticast mode
[   64.835198][ T6608] 8021q: adding VLAN 0 to HW filter on device bond3
[   64.887948][ T6608] netlink: 'syz.0.186': attribute type 10 has an invalid length.
[   64.890555][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.894736][ T6608] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   65.124245][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'.
[   65.295444][ T6632] team0: Port device sit3 removed
[   65.472153][ T6647] netlink: 'syz.2.197': attribute type 13 has an invalid length.
[   65.472910][ T6649] netlink: 'syz.2.197': attribute type 13 has an invalid length.
[   65.474978][ T6647] netlink: 'syz.2.197': attribute type 17 has an invalid length.
[   65.477993][ T6649] netlink: 'syz.2.197': attribute type 17 has an invalid length.
[   65.515897][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.519423][ T6649] 8021q: adding VLAN 0 to HW filter on device team0
[   65.524395][ T6649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.530987][ T6649] syz.2.197 (6649) used greatest stack depth: 19712 bytes left
[   65.534439][ T6647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.581860][ T6653] IPv6: sit6: Disabled Multicast RS
[   65.583945][ T6653] sit6: entered allmulticast mode
[   65.650438][ T6661] syzkaller1: entered promiscuous mode
[   65.652397][ T6661] syzkaller1: entered allmulticast mode
[   65.800280][ T6669] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.084380][ T6682] trusted_key: syz.1.205 sent an empty control message without MSG_MORE.
[   66.127614][ T6688] netlink: 'syz.2.207': attribute type 10 has an invalid length.
[   66.131747][ T6688] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.172413][ T6695] rdma_rxe: rxe_newlink: failed to add macvlan1
[   66.277850][ T6701] netlink: 'syz.1.213': attribute type 2 has an invalid length.
[   66.282572][ T6701] k*]: entered promiscuous mode
[   66.296386][ T6701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.305524][ T6701] veth0_to_team: entered promiscuous mode
[   66.308772][ T6701] veth0_to_team: entered allmulticast mode
[   66.814950][ T6729] pimreg3: entered allmulticast mode
[   67.009315][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.068538][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.174717][ T6738] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   67.365172][ T6754] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[   67.385903][ T6754] bond2: entered promiscuous mode
[   67.389005][ T6754] bond2: entered allmulticast mode
[   67.390875][ T6754] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.402250][ T6755] bridge1: entered promiscuous mode
[   67.404473][ T6755] bridge1: entered allmulticast mode
[   67.407340][ T6755] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[   67.430035][ T6759] bond2: left promiscuous mode
[   67.432079][ T6759] bond2: left allmulticast mode
[   67.434326][ T6759] bond3: left promiscuous mode
[   67.437327][ T6759] bond3: left allmulticast mode
[   67.486709][ T5872] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   67.543893][ T6773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.547470][ T6773] syzkaller0: entered promiscuous mode
[   67.549363][ T6773] syzkaller0: entered allmulticast mode
[   67.558811][ T6773] tipc: Resetting bearer <eth:syzkaller0>
[   67.565788][ T6772] tipc: Resetting bearer <eth:syzkaller0>
[   67.571550][ T6772] tipc: Disabling bearer <eth:syzkaller0>
[   67.596709][ T5857] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   68.300590][ T6795] warning: `syz.2.233' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.329204][ T6791] syzkaller1: entered promiscuous mode
[   68.332775][ T6791] syzkaller1: entered allmulticast mode
[   68.627834][ T6814] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   68.634149][ T6814] bridge_slave_0: left allmulticast mode
[   68.637364][ T6814] bridge_slave_0: left promiscuous mode
[   68.640698][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.645112][ T6814] bridge_slave_1: left allmulticast mode
[   68.649283][ T6814] bridge_slave_1: left promiscuous mode
[   68.651837][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.659367][ T6814] bond0: (slave bond_slave_0): Releasing backup interface
[   68.663755][ T6814] bond0: (slave bond_slave_1): Releasing backup interface
[   68.673577][ T6814] team_slave_0: left allmulticast mode
[   68.678761][ T6814] team0: Port device team_slave_0 removed
[   68.682216][ T6814] team_slave_1: left allmulticast mode
[   68.686051][ T6814] team0: Port device team_slave_1 removed
[   68.691081][ T6814] bond0: (slave batadv_slave_0): Releasing backup interface
[   68.698709][ T6814] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.726554][ T6814] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   68.731249][ T6814] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.742625][ T6814] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   68.751021][ T6814] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   69.510699][ T6860] __nla_validate_parse: 17 callbacks suppressed
[   69.510709][ T6860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.254'.
[   69.579003][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   69.588240][ T6867] syz1: rxe_newlink: already configured on macvlan1
[   69.676738][ T6877] IPv6: sit6: Disabled Multicast RS
[   69.698057][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.258'.
[   69.811549][ T6894] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.263'.
[   69.826712][ T6894] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'.
[   69.836315][ T6895] delete_channel: no stack
[   69.985264][ T6903] Bluetooth: MGMT ver 1.23
[   70.131963][ T6909] syzkaller1: entered promiscuous mode
[   70.134896][ T6909] syzkaller1: entered allmulticast mode
[   70.292487][ T6915] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   70.296111][ T6915] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   70.311657][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   70.324360][ T6918] IPv6: sit7: Disabled Multicast RS
[   70.581220][ T6932] IPv6: sit6: Disabled Multicast RS
[   70.583987][ T6932] sit6: entered allmulticast mode
[   70.600753][ T6936] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   70.668166][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[   70.776334][ T6949] bond2: (slave bridge1): Removing an active aggregator
[   70.781733][ T6949] bond2: (slave bridge1): Releasing backup interface
[   70.786270][ T6949] bridge1: left promiscuous mode
[   70.793443][ T6949] bridge1: left allmulticast mode
[   70.826762][ T6941] batadv_slave_1: entered promiscuous mode
[   70.845960][ T6940] batadv_slave_1: left promiscuous mode
[   70.952902][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.955921][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.171716][ T6971] syzkaller1: entered promiscuous mode
[   71.173470][ T6971] syzkaller1: entered allmulticast mode
[   71.530992][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'.
[   71.541245][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[   71.546045][ T6987] bond0: entered promiscuous mode
[   71.549266][ T6987] bond0: entered allmulticast mode
[   71.594618][ T6993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.291'.
[   71.791329][ T7010] bond0: (slave wlan1): Releasing backup interface
[   71.813809][ T7010] bond0: Master is either lo or non-ether device
[   72.066575][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[   72.068963][ T5849] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   72.518695][ T7057] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   72.706156][ T7063] pim6reg1: entered promiscuous mode
[   72.708334][ T7063] pim6reg1: entered allmulticast mode
[   72.879918][ T7072] validate_nla: 1 callbacks suppressed
[   72.879930][ T7072] netlink: 'syz.1.314': attribute type 23 has an invalid length.
[   72.914945][ T7071] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   73.691392][ T7134] batadv_slave_0: entered promiscuous mode
[   74.258377][ T7145] bond0: (slave wlan1): Releasing backup interface
[   74.291146][ T7150] syzkaller1: entered promiscuous mode
[   74.293849][ T7150] syzkaller1: entered allmulticast mode
[   74.584899][ T7168] __nla_validate_parse: 13 callbacks suppressed
[   74.584909][ T7168] netlink: 864 bytes leftover after parsing attributes in process `syz.1.343'.
[   74.624151][ T7166] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   74.630538][ T7166] netlink: 232 bytes leftover after parsing attributes in process `syz.2.342'.
[   74.634419][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[   74.653432][ T7175] sit7: entered allmulticast mode
[   74.655929][ T7175] team0: Port device sit7 added
[   74.800582][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'.
[   74.819209][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'.
[   74.968228][ T7201] netlink: 'syz.1.349': attribute type 1 has an invalid length.
[   74.970642][ T7201] netlink: 232 bytes leftover after parsing attributes in process `syz.1.349'.
[   74.973532][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[   74.990616][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[   75.076146][ T7215] dvmrp0: entered allmulticast mode
[   75.146320][ T7222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.357'.
[   75.158263][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.160814][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.243889][ T7233] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   75.247303][ T7233] netlink: 236 bytes leftover after parsing attributes in process `syz.0.360'.
[   75.256804][ T7233] NCSI netlink: No device for ifindex 813332851
[   75.453994][ T7263] Bluetooth: MGMT ver 1.23
[   75.815771][ T7304] bond2: entered promiscuous mode
[   75.822339][ T7304] bond2: entered allmulticast mode
[   75.824167][ T7304] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.984148][ T7310] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   76.573171][ T7352] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   76.675287][ T7360] veth0_vlan: left promiscuous mode
[   76.678449][ T7360] veth0_vlan: entered promiscuous mode
[   76.696690][ T7360] veth0_vlan: entered allmulticast mode
[   76.711066][ T7360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.789749][ T7359] tipc: Disabling bearer <eth:syzkaller0>
[   76.828946][ T7377] IPv6: sit9: Disabled Multicast RS
[   76.830975][ T7377] sit9: entered allmulticast mode
[   77.076359][ T7412] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   77.261287][ T7420] netlink: 'syz.1.407': attribute type 2 has an invalid length.
[   77.324264][ T7422] netlink: 'syz.2.408': attribute type 6 has an invalid length.
[   77.403565][ T7427] veth0_to_team: left promiscuous mode
[   77.417818][ T7427] veth0_to_team: left allmulticast mode
[   77.516644][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   77.517146][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   77.523126][ T7431] netlink: 'syz.2.411': attribute type 1 has an invalid length.
[   77.618676][ T7431] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   77.628003][ T5857] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   77.635877][ T7431] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.681430][ T7431] veth3: entered promiscuous mode
[   77.698374][ T7431] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   77.719910][ T7437] bond3: (slave ip6gretap1): Removing an active aggregator
[   77.732041][ T7437] bond3: (slave ip6gretap1): Releasing backup interface
[   77.744871][ T7437] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 8a:33:43:ac:61:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   77.786171][ T7437] bond3: (slave veth3): Releasing backup interface
[   78.790729][ T7460] netlink: 'syz.1.420': attribute type 6 has an invalid length.
[   78.800267][ T7460] netlink: 'syz.1.420': attribute type 12 has an invalid length.
[   78.872099][ T7467] xt_socket: unknown flags 0xfc
[   79.471366][ T7501] IPv6: sit10: Disabled Multicast RS
[   79.473472][ T7501] sit10: entered allmulticast mode
[   79.590407][ T7522] netlink: 'syz.2.438': attribute type 6 has an invalid length.
[   79.635197][ T7521] netlink: 'syz.2.438': attribute type 12 has an invalid length.
[   79.642791][ T7521] __nla_validate_parse: 28 callbacks suppressed
[   79.642806][ T7521] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.438'.
[   79.676038][ T7522] netlink: 'syz.2.438': attribute type 12 has an invalid length.
[   79.682766][ T7522] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.438'.
[   79.874913][ T7528] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   79.878742][ T7528] netlink: 232 bytes leftover after parsing attributes in process `syz.0.440'.
[   79.882661][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[   79.944197][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[   79.987385][ T7552] netlink: 360 bytes leftover after parsing attributes in process `syz.1.445'.
[   80.245415][ T7579] bond0: left promiscuous mode
[   80.247517][ T7579] bond0: left allmulticast mode
[   80.260607][ T7579] batadv_slave_0: left promiscuous mode
[   80.263749][ T7579] veth0_vlan: left allmulticast mode
[   80.293690][ T7579] bond2: left promiscuous mode
[   80.297588][ T7579] bond2: left allmulticast mode
[   80.316697][ T7578] delete_channel: no stack
[   80.320668][ T5872] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.324218][ T5872] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.329528][ T5872] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.333050][ T5872] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.430764][ T7581] IPv6: sit11: Disabled Multicast RS
[   80.433346][ T7581] sit11: entered allmulticast mode
[   80.460921][ T7595] netlink: 'syz.1.454': attribute type 9 has an invalid length.
[   80.464118][ T7595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.454'.
[   80.543199][ T7599] sit7: left allmulticast mode
[   80.584219][ T7599] team0: Port device sit7 removed
[   80.599884][ T7599] netlink: 'syz.0.455': attribute type 10 has an invalid length.
[   80.672807][ T7609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.457'.
[   80.691872][ T7609] netlink: 672 bytes leftover after parsing attributes in process `syz.0.457'.
[   80.739698][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[   81.007909][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.011561][ T7635] 8021q: adding VLAN 0 to HW filter on device team0
[   81.019340][ T7635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.088835][ T7643] netlink: 'syz.0.464': attribute type 6 has an invalid length.
[   81.361478][ T7666] bond4: entered promiscuous mode
[   81.363074][ T7666] bond4: entered allmulticast mode
[   81.364774][ T7666] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.373344][ T7667] bond5: entered promiscuous mode
[   81.375138][ T7667] bond5: entered allmulticast mode
[   81.377611][ T7667] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.454266][ T7673] bond4: entered promiscuous mode
[   81.456125][ T7673] bond4: entered allmulticast mode
[   81.458551][ T7673] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.947969][ T7701] bond2: left promiscuous mode
[   81.949971][ T7701] bond2: left allmulticast mode
[   81.954029][ T7701] veth3: left promiscuous mode
[   81.957993][ T7701] bond4: left promiscuous mode
[   81.959906][ T7701] bond4: left allmulticast mode
[   82.130653][ T7720] netlink: 'syz.0.477': attribute type 10 has an invalid length.
[   82.135778][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.149648][ T7720] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   82.153477][ T7720] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.896142][ T7739] syzkaller1: entered promiscuous mode
[   82.900381][ T7739] syzkaller1: entered allmulticast mode
[   83.155451][ T7768] veth0_macvtap: left promiscuous mode
[   83.162008][ T7768] team0: Device veth0_macvtap failed to register rx_handler
[   83.182247][ T7766] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.234686][ T7776] bond5: entered promiscuous mode
[   83.237188][ T7776] bond5: entered allmulticast mode
[   83.239394][ T7776] 8021q: adding VLAN 0 to HW filter on device bond5
[   83.291486][ T7780] sit10: left allmulticast mode
[   83.294801][ T7780] bond4: left promiscuous mode
[   83.298046][ T7780] bond4: left allmulticast mode
[   83.300091][ T7780] bond5: left promiscuous mode
[   83.302007][ T7780] bond5: left allmulticast mode
[   83.312372][ T5872] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.316576][ T5872] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.319990][ T7780] tc_dump_action: action bad kind
[   83.323714][ T5872] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.329166][ T5872] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.923540][ T7821] syzkaller1: entered promiscuous mode
[   83.925948][ T7821] syzkaller1: entered allmulticast mode
[   85.006888][ T7873] __nla_validate_parse: 25 callbacks suppressed
[   85.006901][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'.
[   85.148728][ T7891] netlink: 360 bytes leftover after parsing attributes in process `syz.2.510'.
[   85.248837][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.253194][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.256784][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.260310][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.264860][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.271526][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.280183][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.286789][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   85.378171][ T7913] bridge_slave_0: entered promiscuous mode
[   85.477464][ T7924] validate_nla: 2 callbacks suppressed
[   85.477476][ T7924] netlink: 'syz.2.519': attribute type 2 has an invalid length.
[   85.493252][ T7924] k*]: entered promiscuous mode
[   85.513471][ T7924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.533250][ T7924] veth0_to_team: entered promiscuous mode
[   85.535337][ T7924] veth0_to_team: entered allmulticast mode
[   85.759024][ T7946] netlink: 'syz.0.527': attribute type 6 has an invalid length.
[   85.769504][ T7946] netlink: 'syz.0.527': attribute type 12 has an invalid length.
[   86.068194][ T7977] team0: Port device sit10 added
[   86.202979][ T7984] geneve0: mtu less than device minimum
[   86.432968][ T8001] syz1: rxe_newlink: already configured on macvlan1
[   86.464495][ T8003] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[   86.621718][ T8017] IPv6: sit11: Disabled Multicast RS
[   86.623972][ T8017] sit11: entered allmulticast mode
[   86.659231][ T5872] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0
[   86.662076][ T5872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.665087][ T5872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.668379][ T5872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.864112][ T8034] sctp: [Deprecated]: syz.0.555 (pid 8034) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.864112][ T8034] Use struct sctp_sack_info instead
[   87.156171][ T8046] team0: Port device sit10 removed
[   87.191012][ T8049] netlink: 'syz.2.560': attribute type 16 has an invalid length.
[   87.195764][ T8049] IPv6: NLM_F_REPLACE set, but no existing node found!
[   87.540790][ T2203] IPVS: starting estimator thread 0...
[   87.543765][ T8066] ieee802154 phy0 wpan0: encryption failed: -22
[   87.629136][ T8067] IPVS: using max 92 ests per chain, 220800 per kthread
[   87.635203][ T8071] netlink: 'syz.2.565': attribute type 6 has an invalid length.
[   87.642848][ T8071] netlink: 'syz.2.565': attribute type 12 has an invalid length.
[   87.671280][ T8078] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   87.679013][ T8078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.290825][ T8112] netlink: 'syz.2.577': attribute type 5 has an invalid length.
[   88.384780][ T8122] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   88.403683][ T8124] IPv6: sit15: Disabled Multicast RS
[   88.406302][ T8124] sit15: entered allmulticast mode
[   88.609424][ T8138] sit13: entered promiscuous mode
[   89.444912][ T8175] netlink: 'syz.1.592': attribute type 14 has an invalid length.
[   89.471023][ T8179] netlink: 'syz.2.593': attribute type 16 has an invalid length.
[   89.631933][ T8196] bond6: entered promiscuous mode
[   89.633989][ T8196] bond6: entered allmulticast mode
[   89.636587][ T8196] 8021q: adding VLAN 0 to HW filter on device bond6
[   90.022466][ T8209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.336102][ T8231] __nla_validate_parse: 66 callbacks suppressed
[   90.336114][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'.
[   90.433840][ T8240] tipc: Started in network mode
[   90.435817][ T8240] tipc: Node identity 62ff20fbd635, cluster identity 4711
[   90.440694][ T8240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.464132][ T8240] tipc: Disabling bearer <eth:syzkaller0>
[   90.888547][ T8266] bond6: entered promiscuous mode
[   90.890785][ T8266] 8021q: adding VLAN 0 to HW filter on device bond6
[   90.894245][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[   90.981409][ T8273] bond6: left promiscuous mode
[   90.989286][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[   90.993294][ T8273] hsr_slave_0: left promiscuous mode
[   90.995560][ T8273] hsr_slave_1: left promiscuous mode
[   91.249090][ T8288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.620'.
[   91.286679][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[   91.353689][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.361823][ T8288] bond0: (slave rose0): Enslaving as an active interface with an up link
[   91.415275][ T8278] netlink: 156 bytes leftover after parsing attributes in process `syz.0.617'.
[   91.444486][ T8307] validate_nla: 2 callbacks suppressed
[   91.444497][ T8307] netlink: 'syz.2.623': attribute type 2 has an invalid length.
[   91.505668][ T8307] netlink: 92 bytes leftover after parsing attributes in process `syz.2.623'.
[   91.741605][ T8326] netlink: 72 bytes leftover after parsing attributes in process `syz.0.626'.
[   91.752184][ T8327] syzkaller1: entered promiscuous mode
[   91.753971][ T8327] syzkaller1: entered allmulticast mode
[   93.087411][ T8359] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   93.624433][ T8384] netlink: 156 bytes leftover after parsing attributes in process `syz.1.638'.
[   93.718451][ T8389] netlink: 'syz.0.640': attribute type 1 has an invalid length.
[   93.721298][ T8389] netlink: 232 bytes leftover after parsing attributes in process `syz.0.640'.
[   93.756319][ T8402] syzkaller1: entered promiscuous mode
[   93.758839][ T8402] syzkaller1: entered allmulticast mode
[   93.775883][ T8402] IPv6: sit18: Disabled Multicast RS
[   94.034082][ T8420] bond0: entered promiscuous mode
[   94.036157][ T8420] bond0: left promiscuous mode
[   94.113509][ T8425] netlink: 'syz.0.647': attribute type 10 has an invalid length.
[   94.127198][ T8425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.130546][ T8425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.159049][ T8427] netlink: 'syz.2.650': attribute type 2 has an invalid length.
[   94.181041][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.183719][ T8427] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.252080][ T8433] netlink: 'syz.2.651': attribute type 10 has an invalid length.
[   94.254509][ T8433] macvlan0: entered promiscuous mode
[   94.285628][ T8436] vlan0: entered promiscuous mode
[   94.290395][ T8435] tipc: Enabled bearer <eth:team0>, priority 0
[   94.863470][ T8462] sit13: left promiscuous mode
[   94.878565][ T8462] nbd: couldn't find device at index 536870912
[   95.082202][ T8482] gretap0: entered promiscuous mode
[   95.089013][ T8482] syzkaller1: entered promiscuous mode
[   95.090741][ T8482] syzkaller1: entered allmulticast mode
[   95.412525][  T790] tipc: Node number set to 394667038
[   95.424479][ T8504] __nla_validate_parse: 12 callbacks suppressed
[   95.424494][ T8504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.669'.
[   95.454934][ T8508] netlink: 'syz.1.670': attribute type 4 has an invalid length.
[   95.471028][ T8508] netlink: 'syz.1.670': attribute type 4 has an invalid length.
[   95.478743][ T8508] IPv6: sit14: Disabled Multicast RS
[   95.481440][ T8508] sit14: entered allmulticast mode
[   95.501729][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[   95.510041][ T8512] veth0_to_team: entered promiscuous mode
[   95.512466][ T8512] veth0_to_team: entered allmulticast mode
[   95.585582][ T8514] netlink: 'syz.0.672': attribute type 12 has an invalid length.
[   95.588484][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'.
[   95.625196][ T8521] netlink: 'syz.2.675': attribute type 7 has an invalid length.
[   95.660304][ T8524] tipc: New replicast peer: 255.255.255.255
[   95.663123][ T8524] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.689723][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'.
[   95.818904][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'.
[   95.923552][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'.
[   95.927559][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[   96.129906][ T8557] netlink: 'syz.1.685': attribute type 13 has an invalid length.
[   96.133091][ T8558] gretap0: refused to change device tx_queue_len
[   96.141925][ T8558] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   96.159987][ T8557] gretap0: refused to change device tx_queue_len
[   96.162042][ T8557] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   96.451021][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[   96.453912][ T8584] netlink: 404 bytes leftover after parsing attributes in process `syz.0.693'.
[   96.457517][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[   96.790531][ T8608] validate_nla: 4 callbacks suppressed
[   96.790541][ T8608] netlink: 'syz.2.700': attribute type 10 has an invalid length.
[   96.795354][ T8608] bond0: option arp_all_targets: invalid value (196616)
[   96.846876][ T8613] netlink: 'syz.0.701': attribute type 83 has an invalid length.
[   96.850523][ T8613] netlink: 'syz.0.701': attribute type 49 has an invalid length.
[   97.163352][ T8641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.201630][ T8641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.299077][ T8641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.344887][ T8641] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.412638][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.421349][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.428698][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.435406][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.897892][ T8681] rdma_rxe: rxe_newlink: failed to add macvlan1
[   98.131277][ T8699] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.142700][ T8699] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   98.152503][ T8699] bond3: (slave macvlan2): Enslaving as a backup interface with an up link
[   98.159056][ T8699] netlink: 'syz.1.725': attribute type 1 has an invalid length.
[   98.164028][ T8699] bond0: (slave wlan1): Releasing backup interface
[   98.173975][ T8699] bond3: (slave macvlan2): Releasing backup interface
[   98.191585][ T8701] netlink: 'syz.0.724': attribute type 16 has an invalid length.
[   98.197924][ T8701] netlink: 'syz.0.724': attribute type 17 has an invalid length.
[   98.285255][ T8706] sctp: [Deprecated]: syz.1.727 (pid 8706) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.285255][ T8706] Use struct sctp_sack_info instead
[   99.296643][ T8755] IPv6: sit19: Disabled Multicast RS
[   99.299345][ T8755] sit19: entered allmulticast mode
[   99.493581][ T8765] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   99.699984][ T8795] netlink: zone id is out of range
[   99.702127][ T8795] netlink: zone id is out of range
[   99.704930][ T8795] netlink: zone id is out of range
[   99.716037][ T8795] netlink: zone id is out of range
[   99.723790][ T8795] netlink: zone id is out of range
[   99.727114][ T8795] netlink: zone id is out of range
[   99.729618][ T8795] netlink: get zone limit has 8 unknown bytes
[   99.767619][ T8798] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.775072][ T8798] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   99.779643][ T8798] bond7: (slave macvlan3): Enslaving as a backup interface with an up link
[   99.785696][ T8798] bond7: (slave macvlan3): Releasing backup interface
[   99.889309][ T8803] netlink: 'syz.0.747': attribute type 6 has an invalid length.
[  100.257736][ T8809] syzkaller0: entered promiscuous mode
[  100.259571][ T8809] syzkaller0: entered allmulticast mode
[  100.389450][ T8813] netlink: 'syz.1.750': attribute type 12 has an invalid length.
[  100.473878][ T8826] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.647646][ T8849] __nla_validate_parse: 20 callbacks suppressed
[  100.647656][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  100.661251][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'.
[  100.710861][ T8855] syzkaller1: entered promiscuous mode
[  100.717542][ T8855] syzkaller1: entered allmulticast mode
[  100.728899][ T8855] sit14: entered promiscuous mode
[  100.732879][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.762'.
[  100.970212][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'.
[  100.971904][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'.
[  100.973320][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  100.977525][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  100.990706][ T8872] bond4: entered promiscuous mode
[  100.992302][ T8872] bond4: entered allmulticast mode
[  100.994056][ T8872] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.004178][ T8873] bond5: entered promiscuous mode
[  101.005940][ T8873] bond5: entered allmulticast mode
[  101.009515][ T8873] 8021q: adding VLAN 0 to HW filter on device bond5
[  101.017069][ T8867] tun0: tun_chr_ioctl cmd 1074025675
[  101.019256][ T8867] tun0: persist enabled
[  101.022063][ T8867] tun0: tun_chr_ioctl cmd 1074025675
[  101.024216][ T8867] tun0: persist disabled
[  101.078282][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  101.225345][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'.
[  101.230726][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.768'.
[  101.238457][ T8880] syzkaller1: entered promiscuous mode
[  101.242546][ T8880] syzkaller1: entered allmulticast mode
[  101.588897][ T8900] sctp: [Deprecated]: syz.2.774 (pid 8900) Use of int in max_burst socket option.
[  101.588897][ T8900] Use struct sctp_assoc_value instead
[  101.665349][ T8905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.026678][ T8944] block nbd0: server does not support multiple connections per device.
[  102.030046][ T8944] block nbd0: shutting down sockets
[  102.106633][ T8945] block nbd1: server does not support multiple connections per device.
[  102.109824][ T8945] block nbd1: shutting down sockets
[  102.321982][ T8960] bond4: left promiscuous mode
[  102.323659][ T8960] bond4: left allmulticast mode
[  102.326734][ T8960] bond5: left promiscuous mode
[  102.328631][ T8960] bond5: left allmulticast mode
[  102.333267][ T5906] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.343603][ T5906] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.347723][ T5906] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.355334][ T5906] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  102.375190][ T8964] netlink: 'syz.1.792': attribute type 1 has an invalid length.
[  102.478232][ T8971] netlink: 'syz.1.794': attribute type 1 has an invalid length.
[  102.481964][ T8971] netlink: 'syz.1.794': attribute type 1 has an invalid length.
[  102.546154][ T8980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.560782][ T8979] tipc: Disabling bearer <eth:syzkaller0>
[  102.634244][ T8987] netlink: 'syz.2.799': attribute type 19 has an invalid length.
[  102.668938][ T8987] syzkaller1: entered promiscuous mode
[  102.673954][ T8987] syzkaller1: entered allmulticast mode
[  102.902781][ T9008] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  103.175112][ T9027] IPv6: sit15: Disabled Multicast RS
[  103.184916][ T9027] sit15: entered allmulticast mode
[  104.043867][ T9059] netlink: 'syz.1.815': attribute type 2 has an invalid length.
[  104.051023][ T9059] veth0_to_team: entered promiscuous mode
[  104.053458][ T9059] veth0_to_team: entered allmulticast mode
[  104.123883][ T9063] IPv6: sit15: Disabled Multicast RS
[  104.127240][ T9063] sit15: entered allmulticast mode
[  104.269672][ T9041] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  104.524776][ T9075] veth0_to_team: left promiscuous mode
[  104.526839][ T9075] veth0_to_team: left allmulticast mode
[  104.804436][ T9086] net_ratelimit: 2 callbacks suppressed
[  104.804453][ T9086] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  104.988496][ T9108] bond8: entered promiscuous mode
[  104.990149][ T9108] bond8: entered allmulticast mode
[  104.991948][ T9108] 8021q: adding VLAN 0 to HW filter on device bond8
[  105.067890][ T9122] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  105.741570][ T9149] IPv6: sit15: Disabled Multicast RS
[  105.744378][ T9149] sit15: entered allmulticast mode
[  106.841950][ T9167] netlink: 'syz.1.844': attribute type 17 has an invalid length.
[  107.146162][ T9172] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[  107.224346][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.482829][ T9167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.554429][ T9172] __nla_validate_parse: 14 callbacks suppressed
[  107.554440][ T9172] netlink: 232 bytes leftover after parsing attributes in process `syz.0.845'.
[  107.712123][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'.
[  108.343206][ T9178] netlink: 'syz.1.846': attribute type 21 has an invalid length.
[  110.018084][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'.
[  110.020698][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'.
[  110.186146][ T9184] bond6: entered promiscuous mode
[  110.192442][ T9184] bond6: entered allmulticast mode
[  110.206278][ T9184] 8021q: adding VLAN 0 to HW filter on device bond6
[  110.301068][ T9194] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.849'.
[  110.301477][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'.
[  110.304437][ T9194] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.849'.
[  110.319568][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'.
[  110.326207][ T9195] team0: Failed to send options change via netlink (err -105)
[  110.329151][ T9195] team0: Mode changed to "loadbalance"
[  110.331487][ T9194] netlink: 'syz.1.849': attribute type 26 has an invalid length.
[  110.454054][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  110.485219][ T9213] ==================================================================
[  110.488260][ T9213] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  110.491225][ T9213] Read of size 1 at addr ffff888032b40330 by task syz.1.854/9213
[  110.495443][ T9213] 
[  110.496450][ T9213] CPU: 0 UID: 0 PID: 9213 Comm: syz.1.854 Not tainted syzkaller #0 PREEMPT(full) 
[  110.496467][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.496476][ T9213] Call Trace:
[  110.496498][ T9213]  <TASK>
[  110.496504][ T9213]  dump_stack_lvl+0x189/0x250
[  110.496532][ T9213]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.496549][ T9213]  ? lock_release+0x4b/0x3e0
[  110.496569][ T9213]  ? __virt_addr_valid+0x4a5/0x5c0
[  110.496588][ T9213]  print_report+0xca/0x240
[  110.496601][ T9213]  ? xfrm_state_find+0x2cf2/0x5400
[  110.496614][ T9213]  kasan_report+0x118/0x150
[  110.496635][ T9213]  ? xfrm_state_find+0x2cf2/0x5400
[  110.496651][ T9213]  xfrm_state_find+0x2cf2/0x5400
[  110.496667][ T9213]  ? rcu_is_watching+0x15/0xb0
[  110.496685][ T9213]  ? xfrm_state_find+0x1da/0x5400
[  110.496700][ T9213]  ? __pfx_xfrm_state_find+0x10/0x10
[  110.496713][ T9213]  ? lock_release+0x4b/0x3e0
[  110.496731][ T9213]  ? lock_release+0x4b/0x3e0
[  110.496751][ T9213]  ? is_bpf_text_address+0x292/0x2b0
[  110.496801][ T9213]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  110.496826][ T9213]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  110.496843][ T9213]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  110.496860][ T9213]  ? lock_release+0x4b/0x3e0
[  110.496879][ T9213]  ? xfrm_selector_match+0xbcf/0x1140
[  110.496893][ T9213]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  110.496921][ T9213]  ? rcu_is_watching+0x15/0xb0
[  110.496933][ T9213]  ? xfrm_expand_policies+0x41f/0x6a0
[  110.496951][ T9213]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  110.496972][ T9213]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  110.496990][ T9213]  ? __pfx___might_resched+0x10/0x10
[  110.497006][ T9213]  xfrm_lookup_route+0x3c/0x1c0
[  110.497023][ T9213]  __ip4_datagram_connect+0x9a5/0x1270
[  110.497044][ T9213]  udp_connect+0x33/0x1f0
[  110.497060][ T9213]  __sys_connect+0x316/0x440
[  110.497081][ T9213]  ? __pfx___sys_connect+0x10/0x10
[  110.497104][ T9213]  ? rcu_is_watching+0x15/0xb0
[  110.497119][ T9213]  __x64_sys_connect+0x7a/0x90
[  110.497138][ T9213]  do_syscall_64+0xfa/0x3b0
[  110.497152][ T9213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.497166][ T9213]  ? exc_page_fault+0x9f/0xf0
[  110.497185][ T9213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.497198][ T9213] RIP: 0033:0x7f320f98ebe9
[  110.497211][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.497223][ T9213] RSP: 002b:00007f320dbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  110.497237][ T9213] RAX: ffffffffffffffda RBX: 00007f320fbb6090 RCX: 00007f320f98ebe9
[  110.497247][ T9213] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  110.497255][ T9213] RBP: 00007f320fa11e19 R08: 0000000000000000 R09: 0000000000000000
[  110.497264][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.497272][ T9213] R13: 00007f320fbb6128 R14: 00007f320fbb6090 R15: 00007fff0865a9f8
[  110.497288][ T9213]  </TASK>
[  110.497293][ T9213] 
[  110.608788][ T9213] Allocated by task 7427:
[  110.610430][ T9213]  kasan_save_track+0x3e/0x80
[  110.612259][ T9213]  __kasan_slab_alloc+0x6c/0x80
[  110.614158][ T9213]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  110.616267][ T9213]  xfrm_state_alloc+0x24/0x2f0
[  110.618112][ T9213]  __find_acq_core+0x8a7/0x1c00
[  110.620040][ T9213]  xfrm_find_acq+0x78/0xa0
[  110.621789][ T9213]  xfrm_alloc_userspi+0x6b3/0xc90
[  110.623699][ T9213]  xfrm_user_rcv_msg+0x7a3/0xab0
[  110.625581][ T9213]  netlink_rcv_skb+0x208/0x470
[  110.627483][ T9213]  xfrm_netlink_rcv+0x79/0x90
[  110.629282][ T9213]  netlink_unicast+0x82f/0x9e0
[  110.631107][ T9213]  netlink_sendmsg+0x805/0xb30
[  110.632896][ T9213]  __sock_sendmsg+0x21c/0x270
[  110.634663][ T9213]  ____sys_sendmsg+0x505/0x830
[  110.636513][ T9213]  ___sys_sendmsg+0x21f/0x2a0
[  110.638301][ T9213]  __x64_sys_sendmsg+0x19b/0x260
[  110.640160][ T9213]  do_syscall_64+0xfa/0x3b0
[  110.641877][ T9213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.644018][ T9213] 
[  110.644873][ T9213] Freed by task 10:
[  110.646361][ T9213]  kasan_save_track+0x3e/0x80
[  110.648161][ T9213]  kasan_save_free_info+0x46/0x50
[  110.650060][ T9213]  __kasan_slab_free+0x5b/0x80
[  110.651888][ T9213]  kmem_cache_free+0x18f/0x400
[  110.653669][ T9213]  xfrm_state_gc_task+0x52d/0x6b0
[  110.655628][ T9213]  process_scheduled_works+0xae1/0x17b0
[  110.657700][ T9213]  worker_thread+0x8a0/0xda0
[  110.659458][ T9213]  kthread+0x711/0x8a0
[  110.661061][ T9213]  ret_from_fork+0x3fc/0x770
[  110.662827][ T9213]  ret_from_fork_asm+0x1a/0x30
[  110.664625][ T9213] 
[  110.665549][ T9213] The buggy address belongs to the object at ffff888032b40000
[  110.665549][ T9213]  which belongs to the cache xfrm_state of size 928
[  110.670785][ T9213] The buggy address is located 816 bytes inside of
[  110.670785][ T9213]  freed 928-byte region [ffff888032b40000, ffff888032b403a0)
[  110.675966][ T9213] 
[  110.676923][ T9213] The buggy address belongs to the physical page:
[  110.679431][ T9213] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032b40480 pfn:0x32b40
[  110.683261][ T9213] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  110.686415][ T9213] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  110.689321][ T9213] page_type: f5(slab)
[  110.690851][ T9213] raw: 00fff00000000040 ffff888104e62b40 dead000000000122 0000000000000000
[  110.694110][ T9213] raw: ffff888032b40480 00000000800e000d 00000000f5000000 0000000000000000
[  110.697355][ T9213] head: 00fff00000000040 ffff888104e62b40 dead000000000122 0000000000000000
[  110.700591][ T9213] head: ffff888032b40480 00000000800e000d 00000000f5000000 0000000000000000
[  110.703908][ T9213] head: 00fff00000000002 ffffea0000cad001 00000000ffffffff 00000000ffffffff
[  110.707176][ T9213] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  110.710423][ T9213] page dumped because: kasan: bad access detected
[  110.712828][ T9213] page_owner tracks the page as allocated
[  110.714934][ T9213] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7427, tgid 7426 (syz.1.409), ts 77381594475, free_ts 77028298035
[  110.721857][ T9213]  post_alloc_hook+0x240/0x2a0
[  110.723689][ T9213]  get_page_from_freelist+0x21e4/0x22c0
[  110.725885][ T9213]  __alloc_frozen_pages_noprof+0x181/0x370
[  110.728187][ T9213]  alloc_pages_mpol+0x232/0x4a0
[  110.730049][ T9213]  allocate_slab+0x8a/0x370
[  110.731845][ T9213]  ___slab_alloc+0xbeb/0x1410
[  110.733702][ T9213]  kmem_cache_alloc_noprof+0x283/0x3c0
[  110.735882][ T9213]  xfrm_state_alloc+0x24/0x2f0
[  110.737735][ T9213]  __find_acq_core+0x8a7/0x1c00
[  110.739692][ T9213]  xfrm_find_acq+0x78/0xa0
[  110.741465][ T9213]  xfrm_alloc_userspi+0x6b3/0xc90
[  110.743497][ T9213]  xfrm_user_rcv_msg+0x7a3/0xab0
[  110.745477][ T9213]  netlink_rcv_skb+0x208/0x470
[  110.747377][ T9213]  xfrm_netlink_rcv+0x79/0x90
[  110.749169][ T9213]  netlink_unicast+0x82f/0x9e0
[  110.751022][ T9213]  netlink_sendmsg+0x805/0xb30
[  110.752919][ T9213] page last free pid 5839 tgid 5839 stack trace:
[  110.755416][ T9213]  __free_frozen_pages+0xbc4/0xd30
[  110.757460][ T9213]  __slab_free+0x303/0x3c0
[  110.759028][ T9213]  qlist_free_all+0x97/0x140
[  110.760801][ T9213]  kasan_quarantine_reduce+0x148/0x160
[  110.762925][ T9213]  __kasan_slab_alloc+0x22/0x80
[  110.764433][ T9213]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  110.766153][ T9213]  getname_flags+0xb8/0x540
[  110.767573][ T9213]  __x64_sys_unlink+0x3a/0x50
[  110.769064][ T9213]  do_syscall_64+0xfa/0x3b0
[  110.770476][ T9213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.772326][ T9213] 
[  110.773141][ T9213] Memory state around the buggy address:
[  110.774942][ T9213]  ffff888032b40200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.777714][ T9213]  ffff888032b40280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.780661][ T9213] >ffff888032b40300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.783565][ T9213]                                      ^
[  110.785587][ T9213]  ffff888032b40380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  110.787984][ T9213]  ffff888032b40400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  110.790363][ T9213] ==================================================================
[  110.800501][ T9213] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  110.802690][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.1.854 Not tainted syzkaller #0 PREEMPT(full) 
[  110.805769][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.809488][ T9213] Call Trace:
[  110.810546][ T9213]  <TASK>
[  110.811418][ T9213]  dump_stack_lvl+0x99/0x250
[  110.812985][ T9213]  ? __asan_memcpy+0x40/0x70
[  110.814809][ T9213]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.816769][ T9213]  ? __pfx__printk+0x10/0x10
[  110.818387][ T9213]  vpanic+0x281/0x750
[  110.819814][ T9213]  ? preempt_schedule+0xae/0xc0
[  110.821343][ T9213]  ? __pfx_vpanic+0x10/0x10
[  110.823036][ T9213]  ? preempt_schedule_common+0x83/0xd0
[  110.825081][ T9213]  ? preempt_schedule+0xae/0xc0
[  110.826766][ T9213]  ? __pfx_preempt_schedule+0x10/0x10
[  110.828487][ T9213]  panic+0xb9/0xc0
[  110.829666][ T9213]  ? __pfx_panic+0x10/0x10
[  110.831165][ T9213]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  110.833094][ T9213]  ? xfrm_state_find+0x2cf2/0x5400
[  110.834725][ T9213]  check_panic_on_warn+0x89/0xb0
[  110.836324][ T9213]  ? xfrm_state_find+0x2cf2/0x5400
[  110.837860][ T9213]  end_report+0x78/0x160
[  110.839134][ T9213]  kasan_report+0x129/0x150
[  110.840527][ T9213]  ? xfrm_state_find+0x2cf2/0x5400
[  110.842254][ T9213]  xfrm_state_find+0x2cf2/0x5400
[  110.843953][ T9213]  ? rcu_is_watching+0x15/0xb0
[  110.845646][ T9213]  ? xfrm_state_find+0x1da/0x5400
[  110.847440][ T9213]  ? __pfx_xfrm_state_find+0x10/0x10
[  110.849165][ T9213]  ? lock_release+0x4b/0x3e0
[  110.850837][ T9213]  ? lock_release+0x4b/0x3e0
[  110.852575][ T9213]  ? is_bpf_text_address+0x292/0x2b0
[  110.854567][ T9213]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  110.856676][ T9213]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  110.858714][ T9213]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  110.861043][ T9213]  ? lock_release+0x4b/0x3e0
[  110.862516][ T9213]  ? xfrm_selector_match+0xbcf/0x1140
[  110.864404][ T9213]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  110.866658][ T9213]  ? rcu_is_watching+0x15/0xb0
[  110.868353][ T9213]  ? xfrm_expand_policies+0x41f/0x6a0
[  110.870119][ T9213]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  110.871974][ T9213]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  110.873999][ T9213]  ? __pfx___might_resched+0x10/0x10
[  110.875920][ T9213]  xfrm_lookup_route+0x3c/0x1c0
[  110.877400][ T9213]  __ip4_datagram_connect+0x9a5/0x1270
[  110.879458][ T9213]  udp_connect+0x33/0x1f0
[  110.881122][ T9213]  __sys_connect+0x316/0x440
[  110.882862][ T9213]  ? __pfx___sys_connect+0x10/0x10
[  110.884610][ T9213]  ? rcu_is_watching+0x15/0xb0
[  110.886041][ T9213]  __x64_sys_connect+0x7a/0x90
[  110.887487][ T9213]  do_syscall_64+0xfa/0x3b0
[  110.888924][ T9213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.891134][ T9213]  ? exc_page_fault+0x9f/0xf0
[  110.892528][ T9213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.894299][ T9213] RIP: 0033:0x7f320f98ebe9
[  110.895656][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.901350][ T9213] RSP: 002b:00007f320dbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  110.903827][ T9213] RAX: ffffffffffffffda RBX: 00007f320fbb6090 RCX: 00007f320f98ebe9
[  110.906123][ T9213] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  110.908420][ T9213] RBP: 00007f320fa11e19 R08: 0000000000000000 R09: 0000000000000000
[  110.910941][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.913873][ T9213] R13: 00007f320fbb6128 R14: 00007f320fbb6090 R15: 00007fff0865a9f8
[  110.916960][ T9213]  </TASK>
[  110.918759][ T9213] Kernel Offset: disabled
[  110.920230][ T9213] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:58:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003536e10
R8 =ffff888106500237 R9 =1ffff11020ca0046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd8f7 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f320dbd56c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002840 CR3=00000001266d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f320fb87498 00007f320fb87470 XMM03=00007f320fb874a8 00007f320fb874a0
XMM04=00007f32106ed100 00007f320fb87460 XMM05=00007f320fb87478 00007f320fb874c0
XMM06=00007f320fb874b8 00007f320fb874b0 XMM07=00007f320fb874a8 00007f320fb874a0
XMM08=0000000000000000 00007f320fa12ee7 XMM09=0000000000000000 00007f320fa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffc9000294ee80 RCX=b3f22a744504ce00 RDX=dffffc0000000000
RSI=ffffffff81d0d2d7 RDI=ffffc9000294edc8 RBP=ffffc9000294ee50 RSP=ffffc9000294edb8
R8 =ffffc9000294ee90 R9 =000000000000000d R10=ffffc9000294ee18 R11=ffffffff81ac3810
R12=ffff88810d1eb980 R13=0000000000000000 R14=ffffffff81ac3810 R15=ffffc9000294edc8
RIP=ffffffff8172c0f5 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2508ff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9c7495440 CR3=00000001266d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f250af87498 00007f250af87470 XMM03=00007f250af874a8 00007f250af874a0
XMM04=00007f250baed100 00007f250af87460 XMM05=00007f250af87478 00007f250af874c0
XMM06=00007f250af874b8 00007f250af874b0 XMM07=00007f250af874a8 00007f250af874a0
XMM08=0000000000000000 00007f250ae12ee7 XMM09=0000000000000000 00007f250ae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
