last executing test programs:

1.380783333s ago: executing program 1 (id=406):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async)
bind$bt_hci(r0, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba00, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}}, 0x8000002) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x4) (async)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r7, 0x3, {0x1}, 0x3}, 0x18) (async)
setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000240), 0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) (async)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)

1.380583733s ago: executing program 1 (id=407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x5, 0x2, 0x8, 0x6, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r3, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}}, 0x0)

1.300108447s ago: executing program 1 (id=408):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x4, 0x80}, @call={0x85, 0x0, 0x0, 0x91}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000200)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10)

1.127511891s ago: executing program 2 (id=420):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x1, 0x20080058)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r4 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000040601020000000000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r9, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000003a00090603000000fdffffff02"], 0x18}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

1.040006775s ago: executing program 2 (id=422):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7d9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r2}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

960.5942ms ago: executing program 2 (id=423):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x10001}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x10001}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)

954.677498ms ago: executing program 2 (id=425):
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}, {@in=@dev, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fff}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd28, 0x70bd29, 0x70bd2b, 0x36405ff2}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7ff}]}]}, 0x158}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r3, 0x200000, {0x1, 0x0, 0x3}}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x7}, @union={0x3, 0x8, 0x0, 0x5, 0x0, 0x6, [{0xf, 0x1, 0x44}, {0x6, 0x4, 0xd2}, {0x3, 0x1, 0xfffffff1}, {0x5, 0x2, 0x8}, {0x7, 0x0, 0x15a0f0b6}, {0x10, 0x2, 0x10001}, {0xe, 0x2, 0xa12}, {0x9, 0x1, 0xa}]}, @fwd={0x1}, @ptr]}, {0x0, [0x5f]}}, &(0x7f0000000500)=""/240, 0xaf, 0xf0, 0x1, 0x6bb1, 0x10000}, 0x28)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x5460, 0x0)

789.463597ms ago: executing program 1 (id=431):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]})
r4 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000580)={0x12, {{0x29, 0x0, 0x3ffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}}}, 0x88)
close(r0)

702.350215ms ago: executing program 1 (id=434):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20}, @dstaddrv6={0x20, 0x84, 0x8, @dev}], 0x40}, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)={0x44, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x44}}, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000380)={r2, r4, 0x2, 0x61, &(0x7f0000000300)="f1277acb9252b1aab928ad400cefcf5aafef7e562ed5944ac90307dcf6d6d4f896422032c31a5ff5722d77aba6019183f1b367958563f8f8401d84290307a062da4d62d90c89833477bdd0473fbf5b62cbefe2fd65a91e6dd9df86b12c520f5dc1", 0xec, 0x3, 0x9, 0x7, 0x0, 0x2, 0x0, 'syz1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}}, 0x4000800)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028000040003000000"], 0x44}}, 0x0)

640.351683ms ago: executing program 1 (id=436):
socket(0x10, 0x803, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2075, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061100000000000006200020000e06a11510000009500000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

396.907684ms ago: executing program 0 (id=442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @local, 'ip6_vti0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0xfffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'geneve1\x00'}}, 0x1e) (async, rerun: 64)
r3 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="5677dee5a538", 'ip_vti0\x00'}}, 0x1e) (async)
close(0x3) (async)
r4 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'geneve1\x00', {}, 0x4})
listen(r4, 0x8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000014000000020a0101000000000000000000000008240000000c0a01030000000000000000070000080900010073797a300000000004000380140000001000010000800000000000000084000a"], 0x80}}, 0x0) (async, rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYRES8=r6, @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffed8"], 0x184}}, 0x0) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=<r11=>0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0xfffffffffffffd7f}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) (async)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r11, 0xffffffffffffffff, 0x5, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e42200000000000000000000020000000000190100", 0x3c}, 0x60)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}}, 0x8020)

330.675344ms ago: executing program 0 (id=443):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x3ff, 0x0, "25af22"}})

330.354685ms ago: executing program 0 (id=444):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x8, 0x4)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000002240)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xa, 0x11, 0xff, @empty, @mcast2, {[], {0x4e23, 0x4e20, 0xa, 0x0, @opaque=']a'}}}}}}}, 0x91)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x90}, 0x1, 0x7}, 0x0) (async)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x90}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)

68.169313ms ago: executing program 0 (id=445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000060000000000a20000000010a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)

67.524331ms ago: executing program 2 (id=446):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000900)={0x29c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x1d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x99, 0x5, "b119067027ec9924b8a0b635a086ea2f441adc08896e45015532fe478c55f4d3563fc0d3f0ba321a2f59b07c629b8c57c6b8408092f1d599607947e209302ad81ea54da812209c93888164a23588fbfeae8e6176277070f96caf81d04d6ce20143efdce771400af9482641becf9d85ab48f3fe315f940e01c5588c9427bb668c2e64f2337cf58b33479a163f7d17886d047b9f2755"}, @ETHTOOL_A_BITSET_MASK={0x70, 0x5, "ed9fcb6b28ee31ec7e2369ba5dd1bd2a8a48557c7b45cb9b05e327c43d82151bf441424d2e6b633c3a1b9e8a1d47186805b3368e9ec5fbc159a6e7d98daabfad2e120a6f38c1e398608e618e4d2c5bfe80946eae85d8f05bc89975c2869f883a992289fdb0192e15ca5c37bd"}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "5e3264f856024a787a7ac48f12b57b11e99aa2584ace51910301a220c6791b444a90e652199507e08904af52a38495217900889d9cb3081c7f7869cda782d40d66"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf26}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "076f47ff672bc3aac9da60e817c5e2e210ef10f78dd0db17c305704b85cc36196757c724b4fe106b4adfa77acdb178a2a105c677"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0c1001"], 0x24}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@mcast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x24000041)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfe, 0x0, 0x87, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x80000045, [0x2, 0x7]}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x34}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)

66.336714ms ago: executing program 0 (id=447):
socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a18381bf0000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000043000e0088000000080211000000ffffffffffff080211000001000000000000000000006400000000060202020202020301007206030303030303760600000000000000"], 0x6c}}, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x300, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e6301423e37ff4a286545a6aaf8c5ad0eb47c26f52215a4e0c727c3a41c28898b1728c72"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @local, 0xd090}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9810}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf44}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x402}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1317}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa712a060}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x454}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) (rerun: 32)
setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r11, 0x0, 0x0)
recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0)

404.617µs ago: executing program 0 (id=448):
r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="000000000000000000000000000500008d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={<r4=>r1, 0x97c9, 0xfffffffeffffffff, 0x5}) (rerun: 64)
setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000180)=0xc337, 0x4) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x3, 0x14)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 32)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (rerun: 32)

0s ago: executing program 2 (id=449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
unshare(0x24060400) (async, rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45108' (ED25519) to the list of known hosts.
syzkaller login: [   40.518415][ T5805] cgroup: Unknown subsys name 'net'
[   40.618758][ T5805] cgroup: Unknown subsys name 'cpuset'
[   40.621685][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.707986][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.203649][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.215969][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.219295][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.222329][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.233174][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.236193][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.239652][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.242438][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.244780][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.247856][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.251212][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.257724][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.260283][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.262960][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.268275][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.336385][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   44.365781][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.368654][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.370959][ T5840] bridge_slave_0: entered allmulticast mode
[   44.373247][ T5840] bridge_slave_0: entered promiscuous mode
[   44.384819][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.388178][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.391126][ T5840] bridge_slave_1: entered allmulticast mode
[   44.393723][ T5840] bridge_slave_1: entered promiscuous mode
[   44.417675][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.422729][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.430562][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   44.448336][ T5840] team0: Port device team_slave_0 added
[   44.452020][ T5840] team0: Port device team_slave_1 added
[   44.470001][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   44.473929][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.476642][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.485349][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.495131][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.498216][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.506475][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.522693][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.524988][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.528547][ T5844] bridge_slave_0: entered allmulticast mode
[   44.531191][ T5844] bridge_slave_0: entered promiscuous mode
[   44.546102][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.549846][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.552869][ T5844] bridge_slave_1: entered allmulticast mode
[   44.556004][ T5844] bridge_slave_1: entered promiscuous mode
[   44.583711][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.595916][ T5840] hsr_slave_0: entered promiscuous mode
[   44.599475][ T5840] hsr_slave_1: entered promiscuous mode
[   44.605669][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.639215][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.642210][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.645156][ T5836] bridge_slave_0: entered allmulticast mode
[   44.648473][ T5836] bridge_slave_0: entered promiscuous mode
[   44.652214][ T5844] team0: Port device team_slave_0 added
[   44.654699][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.658129][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.661084][ T5836] bridge_slave_1: entered allmulticast mode
[   44.664176][ T5836] bridge_slave_1: entered promiscuous mode
[   44.673891][ T5844] team0: Port device team_slave_1 added
[   44.709020][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.711550][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.721290][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.726271][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.731953][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.744165][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.746755][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.757937][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.773312][ T5836] team0: Port device team_slave_0 added
[   44.786052][ T5836] team0: Port device team_slave_1 added
[   44.812436][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.816006][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.826051][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.831131][ T5844] hsr_slave_0: entered promiscuous mode
[   44.833360][ T5844] hsr_slave_1: entered promiscuous mode
[   44.835355][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   44.837177][ T5844] Cannot create hsr debugfs directory
[   44.843700][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.846268][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.855514][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.894826][ T5836] hsr_slave_0: entered promiscuous mode
[   44.897803][ T5836] hsr_slave_1: entered promiscuous mode
[   44.900470][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   44.902893][ T5836] Cannot create hsr debugfs directory
[   44.924631][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   44.933656][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   44.947883][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   44.957451][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   44.998427][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.001133][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.003895][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.006325][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.010807][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.014944][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.022544][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.025977][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.044975][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.049139][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.053257][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.056655][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.073307][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.075686][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.078254][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.080654][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.085267][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.087744][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.090144][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.092454][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.102667][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.114356][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.117174][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.121687][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.124360][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.129866][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.132368][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.140149][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   45.145165][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.147566][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.159074][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.161413][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.172831][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.186014][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.192942][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   45.200609][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.202923][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.210128][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.212512][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.224928][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   45.237622][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.240391][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.248637][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.250971][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.271650][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   45.274943][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.303289][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.309469][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.341891][ T5836] veth0_vlan: entered promiscuous mode
[   45.345222][ T5836] veth1_vlan: entered promiscuous mode
[   45.352954][ T5840] veth0_vlan: entered promiscuous mode
[   45.360581][ T5840] veth1_vlan: entered promiscuous mode
[   45.370169][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.374640][ T5836] veth0_macvtap: entered promiscuous mode
[   45.382188][ T5836] veth1_macvtap: entered promiscuous mode
[   45.395880][ T5840] veth0_macvtap: entered promiscuous mode
[   45.401422][ T5840] veth1_macvtap: entered promiscuous mode
[   45.404233][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.415144][ T5844] veth0_vlan: entered promiscuous mode
[   45.418317][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.423465][ T5844] veth1_vlan: entered promiscuous mode
[   45.428935][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.431390][ T5903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.435469][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.443656][ T5903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.448643][ T5903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.452416][ T5903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.461796][ T5702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.465472][ T5702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.475942][ T5702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.478913][ T5702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.500455][ T5844] veth0_macvtap: entered promiscuous mode
[   45.503672][ T5844] veth1_macvtap: entered promiscuous mode
[   45.519249][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.521925][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.535474][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.539507][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.541392][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.545838][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.549651][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.559382][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.565996][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.569720][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.572855][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.575401][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.579832][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.587453][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.591157][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.623351][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.636738][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.655519][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.659430][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.722317][ T5914] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   45.725552][ T5913] wg1 speed is unknown, defaulting to 1000
[   45.735328][ T5913] wg1 speed is unknown, defaulting to 1000
[   45.739056][ T5913] wg1 speed is unknown, defaulting to 1000
[   45.745531][ T5913] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   45.754789][ T5913] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   45.769215][ T5907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   45.778671][ T5913] wg1 speed is unknown, defaulting to 1000
[   45.781016][ T5913] wg1 speed is unknown, defaulting to 1000
[   45.783263][ T5913] wg1 speed is unknown, defaulting to 1000
[   45.809282][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   45.814032][ T5925] gretap0: entered promiscuous mode
[   45.932186][ T5946] netlink: 'syz.1.12': attribute type 7 has an invalid length.
[   45.935076][ T5946] netlink: 'syz.1.12': attribute type 8 has an invalid length.
[   46.257667][ T5240] Bluetooth: hci1: command tx timeout
[   46.337582][ T5846] Bluetooth: hci0: command tx timeout
[   46.339473][ T5240] Bluetooth: hci2: command tx timeout
[   46.751328][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'.
[   46.769519][ T5981] Zero length message leads to an empty skb
[   47.022173][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.514576][ T6021] wg1 speed is unknown, defaulting to 1000
[   47.526230][ T6022] wg1 speed is unknown, defaulting to 1000
[   47.623343][ T6029] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET)
[   47.704703][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'.
[   47.708964][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'.
[   47.714653][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.719193][ T6032] bond0: (slave rose0): Enslaving as an active interface with an up link
[   47.755410][ T6039] IPv6: Can't replace route, no match found
[   47.844883][ T6055] netlink: 196 bytes leftover after parsing attributes in process `syz.2.41'.
[   47.882492][ T6059] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.956353][ T6065] wg1 speed is unknown, defaulting to 1000
[   48.003480][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'.
[   48.317880][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[   48.320776][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   48.337819][ T5240] Bluetooth: hci1: command tx timeout
[   48.417387][ T5846] Bluetooth: hci0: command tx timeout
[   48.419343][ T5240] Bluetooth: hci2: command tx timeout
[   48.624070][ T6093] xt_HMARK: proto mask must be zero with L3 mode
[   49.009976][ T6105] netlink: 'syz.2.52': attribute type 12 has an invalid length.
[   49.013041][ T6105] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.52'.
[   49.111019][   T33] audit: type=1107 audit(1756216295.046:2): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='5|9w{vm876MfhF>Oϑa0ڭɣ!ޥ=Q'
[   49.192340][ T6128] xt_policy: neither incoming nor outgoing policy selected
[   49.200912][ T6128] batman_adv: batadv0: Adding interface: gretap1
[   49.203556][ T6128] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.215021][ T6128] batman_adv: batadv0: Interface activated: gretap1
[   49.250921][ T6132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.270704][ T6137] ieee802154 phy0 wpan0: encryption failed: -22
[   49.326392][ T6153] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   49.580744][ T6198] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   49.593784][ T6196] vxcan2: entered promiscuous mode
[   49.672077][ T6208] netlink: 'syz.0.75': attribute type 30 has an invalid length.
[   49.707998][ T6213] netlink: zone id is out of range
[   49.710067][ T6213] netlink: zone id is out of range
[   49.712000][ T6213] netlink: zone id is out of range
[   49.713842][ T6213] netlink: zone id is out of range
[   49.715710][ T6213] netlink: zone id is out of range
[   49.718493][ T6213] netlink: zone id is out of range
[   49.720471][ T6213] netlink: zone id is out of range
[   49.722289][ T6213] netlink: get zone limit has 8 unknown bytes
[   49.847908][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   49.854664][ T6229] netlink: 'syz.0.83': attribute type 2 has an invalid length.
[   49.861997][ T6229] : entered promiscuous mode
[   49.953830][ T6238] wg1 speed is unknown, defaulting to 1000
[   50.422668][ T5846] Bluetooth: hci1: command tx timeout
[   50.497901][ T5846] Bluetooth: hci0: command tx timeout
[   50.500079][ T5846] Bluetooth: hci2: command tx timeout
[   50.626049][ T6294] IPVS: Unknown mcast interface: bridGe_slave0
[   50.850224][ T6311] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   50.913283][ T6328] __nla_validate_parse: 13 callbacks suppressed
[   50.913293][ T6328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.104'.
[   50.924757][ T6328] netlink: 43 bytes leftover after parsing attributes in process `syz.0.104'.
[   50.927923][ T6328] netlink: 'syz.0.104': attribute type 6 has an invalid length.
[   50.930384][ T6328] netlink: 'syz.0.104': attribute type 5 has an invalid length.
[   50.933020][ T6328] netlink: 43 bytes leftover after parsing attributes in process `syz.0.104'.
[   50.952401][ T6337] pim6reg1: entered promiscuous mode
[   50.954139][ T6337] pim6reg1: entered allmulticast mode
[   51.079102][ T6343] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.081954][ T6343] bond0: (slave bond1): Enslaving as an active interface with an up link
[   51.120552][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'.
[   51.129169][ T6351] netlink: 'syz.0.112': attribute type 2 has an invalid length.
[   51.133225][ T6351] `: entered promiscuous mode
[   51.135833][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'.
[   51.154784][ T6355] trusted_key: syz.0.114 sent an empty control message without MSG_MORE.
[   51.180495][ T6356] tipc: Started in network mode
[   51.182263][ T6356] tipc: Node identity 9ea5fe597a76, cluster identity 4711
[   51.184824][ T6356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.187717][ T6356] syzkaller0: entered promiscuous mode
[   51.189746][ T6356] syzkaller0: entered allmulticast mode
[   51.214716][ T6355] syzkaller1: entered promiscuous mode
[   51.216661][ T6355] syzkaller1: entered allmulticast mode
[   51.220284][ T6355] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   51.277774][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'.
[   51.283711][ T6359] ieee802154 phy0 wpan0: encryption failed: -22
[   51.330234][ T6364] netlink: 'syz.0.116': attribute type 12 has an invalid length.
[   51.384972][ T6373] netlink: 'syz.1.117': attribute type 12 has an invalid length.
[   51.388504][ T6373] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.117'.
[   51.577847][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'.
[   51.581872][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'.
[   51.622603][ T6403] ipvlan2: entered promiscuous mode
[   51.624617][ T6403] ipvlan2: entered allmulticast mode
[   51.626675][ T6403] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   51.825159][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'.
[   51.904173][ T6416] wg1 speed is unknown, defaulting to 1000
[   51.955381][ T6352] tipc: Resetting bearer <eth:syzkaller0>
[   51.961613][ T6352] tipc: Disabling bearer <eth:syzkaller0>
[   52.133045][ T6438] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   52.145264][ T6438] bond2 (unregistering): Released all slaves
[   52.186813][ T6444] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[   52.223783][ T6449] Bluetooth: MGMT ver 1.23
[   52.393053][ T6462] tipc: Started in network mode
[   52.404329][ T6462] tipc: Node identity 021b6f0d8463, cluster identity 4711
[   52.407150][ T6462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.411800][ T6462] syzkaller0: entered promiscuous mode
[   52.415546][ T6462] syzkaller0: entered allmulticast mode
[   52.424269][ T6462] tipc: Resetting bearer <eth:syzkaller0>
[   52.428540][ T6461] tipc: Resetting bearer <eth:syzkaller0>
[   52.433732][ T6461] tipc: Disabling bearer <eth:syzkaller0>
[   52.482173][ T6466] netlink: 'syz.1.144': attribute type 2 has an invalid length.
[   52.486474][ T6466] `: entered promiscuous mode
[   52.497438][ T5846] Bluetooth: hci1: command tx timeout
[   52.521746][ T6471] netlink: zone id is out of range
[   52.524164][ T6471] netlink: zone id is out of range
[   52.532710][ T6471] netlink: zone id is out of range
[   52.534556][ T6471] netlink: zone id is out of range
[   52.536553][ T6471] netlink: zone id is out of range
[   52.539032][ T6471] netlink: zone id is out of range
[   52.540742][ T6471] netlink: zone id is out of range
[   52.542490][ T6471] netlink: zone id is out of range
[   52.544273][ T6471] netlink: zone id is out of range
[   52.577466][ T5846] Bluetooth: hci2: command tx timeout
[   52.579838][ T5846] Bluetooth: hci0: command tx timeout
[   52.639762][ T6481] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   52.650256][ T6481] 8021q: adding VLAN 0 to HW filter on device bond2
[   52.665849][ T6481] bond2: (slave gretap1): making interface the new active one
[   52.671667][ T6481] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   52.695169][ T6491] netlink: 'syz.0.151': attribute type 11 has an invalid length.
[   52.708778][ T6493] xt_socket: unknown flags 0xd0
[   52.917950][ T6517] block nbd0: server does not support multiple connections per device.
[   52.922439][ T6517] block nbd0: shutting down sockets
[   52.989239][ T6525] bridge_slave_0: left allmulticast mode
[   52.997432][ T6525] bridge_slave_0: left promiscuous mode
[   52.999865][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.004777][ T6525] bridge_slave_1: left allmulticast mode
[   53.007207][ T6525] bridge_slave_1: left promiscuous mode
[   53.010887][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.016321][ T6525] bond0: (slave bond_slave_0): Releasing backup interface
[   53.022945][ T6525] bond0: (slave bond_slave_1): Releasing backup interface
[   53.031175][ T6525] team0: Port device team_slave_0 removed
[   53.035320][ T6525] team0: Port device team_slave_1 removed
[   53.039122][ T6525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.041810][ T6525] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.044946][ T6525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.048574][ T6525] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.057020][ T6525] bond2: (slave gretap1): Releasing active interface
[   53.067058][ T6525] netlink: 'syz.1.162': attribute type 10 has an invalid length.
[   53.074996][ T6525] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.079087][ T6529] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   53.083145][ T6525] IPVS: length: 24 != 134518761720
[   53.832795][ T6538] syzkaller0: entered promiscuous mode
[   53.835121][ T6538] syzkaller0: entered allmulticast mode
[   53.840136][  T792] cfg80211: failed to load regulatory.db
[   53.955938][ T6552] bond0: entered promiscuous mode
[   53.958598][ T6552] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   53.963183][ T6552] batadv0: entered promiscuous mode
[   53.966653][ T6552] 8021q: adding VLAN 0 to HW filter on device hsr1
[   54.240055][ T6594] netlink: 'syz.1.180': attribute type 4 has an invalid length.
[   54.335348][ T6612] net veth1_virt_wifi : renamed from virt_wifi0
[   54.443468][  T792] wg1 speed is unknown, defaulting to 1000
[   54.657585][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[   54.673517][ T6657] gretap0: entered promiscuous mode
[   54.884940][ T5290] udevd[5290]: worker [5837] terminated by signal 33 (Unknown signal 33)
[   54.888180][ T5290] udevd[5290]: worker [5837] failed while handling '/devices/virtual/block/loop1'
[   54.980872][ T6691] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   55.076774][ T6703] macsec1: entered promiscuous mode
[   55.079656][ T6703] team0: entered promiscuous mode
[   55.164104][  T792] IPVS: starting estimator thread 0...
[   55.175574][ T6709] wg1 speed is unknown, defaulting to 1000
[   55.208235][ T6709] batadv_slave_0: entered promiscuous mode
[   55.211552][ T6709] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   55.248177][ T6710] IPVS: using max 131 ests per chain, 314400 per kthread
[   55.751654][ T6747] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   55.756877][ T6747] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[   55.761787][ T6747] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[   55.885728][ T6760] block nbd0: Unsupported socket: shutdown callout must be supported.
[   55.988950][ T6772] __nla_validate_parse: 36 callbacks suppressed
[   55.988959][ T6772] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.239'.
[   55.996931][ T6772] netlink: 96 bytes leftover after parsing attributes in process `syz.0.239'.
[   56.001845][ T6772] vlan2: entered allmulticast mode
[   56.003628][ T6772] ip6gretap0: entered allmulticast mode
[   56.064101][ T6774] sctp: [Deprecated]: syz.0.240 (pid 6774) Use of int in max_burst socket option.
[   56.064101][ T6774] Use struct sctp_assoc_value instead
[   56.071922][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'.
[   56.127126][ T6776] netlink: 256 bytes leftover after parsing attributes in process `syz.1.242'.
[   56.130551][ T6776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.242'.
[   56.149309][ T6785] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   56.158815][ T6785] validate_nla: 6 callbacks suppressed
[   56.158824][ T6785] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   56.182342][ T6791] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   56.203526][ T6791] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   56.206122][ T6791] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   56.212159][ T6791] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   56.214964][ T6791] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   56.221944][ T6791] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   56.255474][ T6800] net_ratelimit: 12 callbacks suppressed
[   56.255484][ T6800] netlink: zone id is out of range
[   56.255584][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   56.263551][ T6800] netlink: zone id is out of range
[   56.265249][ T6800] netlink: zone id is out of range
[   56.266923][ T6800] netlink: zone id is out of range
[   56.273104][ T6800] netlink: zone id is out of range
[   56.274892][ T6800] netlink: zone id is out of range
[   56.277163][ T6800] netlink: zone id is out of range
[   56.279794][ T6800] netlink: zone id is out of range
[   56.281657][ T6800] netlink: zone id is out of range
[   56.284596][ T6800] netlink: zone id is out of range
[   56.289092][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[   56.311195][ T6809] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   56.314833][ T6809] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   56.649521][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'.
[   56.654291][ T6838] ipvlan2: entered promiscuous mode
[   56.656053][ T6838] ipvlan2: entered allmulticast mode
[   56.658602][ T6838] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   56.665744][ T6839] ipvlan3: entered promiscuous mode
[   56.668427][ T6839] ipvlan3: entered allmulticast mode
[   56.745343][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[   56.749137][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'.
[   56.754513][ T6846] netlink: 'syz.2.260': attribute type 16 has an invalid length.
[   56.759688][ T6846] netlink: 'syz.2.260': attribute type 17 has an invalid length.
[   56.784345][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.787152][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.820946][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.825996][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.874566][ T6846] batman_adv: batadv0: Interface deactivated: gretap1
[   56.884915][    T9] wg1 speed is unknown, defaulting to 1000
[   56.886709][ T5702] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.887447][    T9] syz0: Port: 1 Link DOWN
[   56.895011][ T5702] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.910315][ T5702] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.913318][ T5702] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.002088][ T6866] ksmbd: Unknown IPC event: 3, ignore.
[   57.096979][ T6884] netlink: 'syz.2.271': attribute type 2 has an invalid length.
[   57.104876][ T6884] `: entered promiscuous mode
[   57.107052][ T6884] syzkaller0: entered promiscuous mode
[   57.109525][ T6884] syzkaller0: entered allmulticast mode
[   57.112876][ T6884] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[   57.172277][ T6894] lo speed is unknown, defaulting to 1000
[   57.174214][ T6894] lo speed is unknown, defaulting to 1000
[   57.176197][ T6894] lo speed is unknown, defaulting to 1000
[   57.184048][ T6894] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   57.199190][ T6894] lo speed is unknown, defaulting to 1000
[   57.202385][ T6894] lo speed is unknown, defaulting to 1000
[   57.205174][ T6894] lo speed is unknown, defaulting to 1000
[   57.332791][ T6915] 8021q: adding VLAN 0 to HW filter on device bond3
[   57.348840][ T6914] gretap1: entered promiscuous mode
[   57.352795][ T6914] bond4: (slave gretap1): making interface the new active one
[   57.356604][ T6914] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   57.592165][    T9] IPVS: starting estimator thread 0...
[   57.677411][ T6935] IPVS: using max 127 ests per chain, 304800 per kthread
[   57.880215][ T6945] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   57.894957][ T6945] 8021q: adding VLAN 0 to HW filter on device bond5
[   58.093016][ T6959] geneve3: entered promiscuous mode
[   58.257019][ T6966] geneve4: entered promiscuous mode
[   58.279132][ T5702] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   58.286641][ T5702] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   58.294888][ T5702] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   58.300102][ T5702] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   58.541474][ T7013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.548723][ T7016] ip6erspan0: entered allmulticast mode
[   58.719097][ T7029] rdma_rxe: rxe_newlink: failed to add lo
[   59.205485][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.284391][ T7093] wg1 speed is unknown, defaulting to 1000
[   59.287669][ T7093] lo speed is unknown, defaulting to 1000
[   59.503659][ T7110] tipc: New replicast peer: 255.255.255.255
[   59.506100][ T7110] tipc: Enabled bearer <udp:s>, priority 10
[   59.632174][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.119094][ T7148] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   60.125127][ T7148] batadv_slave_1: entered promiscuous mode
[   60.173044][ T7146] batadv_slave_1: left promiscuous mode
[   60.188834][ T7155] netlink: 'syz.2.357': attribute type 11 has an invalid length.
[   60.316783][ T7164] TCP: TCP_TX_DELAY enabled
[   60.617534][  T793] tipc: Node number set to 3839098457
[   61.233341][ T7200] wg1 speed is unknown, defaulting to 1000
[   61.235592][ T7200] lo speed is unknown, defaulting to 1000
[   61.241668][ T7199] wg1 speed is unknown, defaulting to 1000
[   61.244615][ T7199] lo speed is unknown, defaulting to 1000
[   61.292274][ T7198] geneve2: entered promiscuous mode
[   61.294701][ T7198] geneve2: entered allmulticast mode
[   61.327693][ T7210] validate_nla: 8 callbacks suppressed
[   61.327702][ T7210] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[   61.331912][ T7211] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[   61.351144][ T7210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.353456][ T7210] syzkaller0: entered promiscuous mode
[   61.355190][ T7210] syzkaller0: entered allmulticast mode
[   61.359007][ T7210] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   61.361673][ T7210] __nla_validate_parse: 114 callbacks suppressed
[   61.361680][ T7210] netlink: 44 bytes leftover after parsing attributes in process `syz.0.375'.
[   61.368249][ T7211] tipc: Resetting bearer <eth:syzkaller0>
[   61.371140][ T7209] tipc: Resetting bearer <eth:syzkaller0>
[   61.373863][ T7209] tipc: Disabling bearer <eth:syzkaller0>
[   61.469784][ T7221] veth5: entered promiscuous mode
[   61.490924][ T7225] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001
[   61.494503][ T7223] netlink: 'syz.1.378': attribute type 2 has an invalid length.
[   61.507378][ T7223] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[   61.511533][ T7223] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004
[   61.565682][ T7230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.690951][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'.
[   61.747431][ T7257] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.389'.
[   61.949523][ T7280] netlink: 'syz.1.395': attribute type 1 has an invalid length.
[   61.953684][ T7280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.395'.
[   61.990694][ T7284] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.397'.
[   62.028712][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   62.031804][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   62.066638][ T7293] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[   62.151531][ T7301] wg1 speed is unknown, defaulting to 1000
[   62.151548][ T7299] netlink: 256 bytes leftover after parsing attributes in process `syz.1.404'.
[   62.154107][ T7301] lo speed is unknown, defaulting to 1000
[   62.157519][ T7299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.404'.
[   62.171713][ T7299] rdma_rxe: rxe_newlink: failed to add lo
[   62.199848][ T7299] net_ratelimit: 12 callbacks suppressed
[   62.199855][ T7299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.234182][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.406'.
[   62.239055][ T7304] vlan2: entered allmulticast mode
[   62.240743][ T7304] bond0: entered allmulticast mode
[   62.242383][ T7304] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   62.246936][ T7304] batadv_slave_0: entered allmulticast mode
[   62.251500][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.282339][ T7301] netlink: 'syz.2.405': attribute type 13 has an invalid length.
[   62.285424][ T7301] netlink: 'syz.2.405': attribute type 17 has an invalid length.
[   62.294187][ T7301] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   62.321114][ T7313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.423626][ T7328] netlink: 'syz.2.413': attribute type 5 has an invalid length.
[   62.443967][ T7332] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[   62.593782][ T7349] netlink: zone id is out of range
[   62.596038][ T7349] netlink: get zone limit has 8 unknown bytes
[   62.679253][ T7355] rdma_rxe: rxe_newlink: failed to add lo
[   62.683762][ T7357] gretap0: left promiscuous mode
[   62.695327][ T7357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.708378][ T7355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.715068][   T47] lo speed is unknown, defaulting to 1000
[   62.872746][   T10] lo speed is unknown, defaulting to 1000
[   62.875692][   T10] syz1: Port: 1 Link DOWN
[   62.940210][ T7393] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   63.362818][ T7439] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[   63.366567][ T7439] bond9: (slave vxcan3): Error -95 calling set_mac_address
[   63.376938][ T7442] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[   63.381019][ T7442] bond9: (slave vxcan3): Error -95 calling set_mac_address
[   63.572433][ T7462] batadv_slave_1: entered promiscuous mode
[   63.591654][ T7463] batadv_slave_1: left promiscuous mode
[   64.047971][ T7398] ==================================================================
[   64.050563][ T7398] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   64.053104][ T7398] Read of size 1 at addr ffff88801f59dc32 by task syz.1.436/7398
[   64.056282][ T7398] 
[   64.057102][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) 
[   64.057112][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.057117][ T7398] Call Trace:
[   64.057121][ T7398]  <TASK>
[   64.057124][ T7398]  dump_stack_lvl+0x189/0x250
[   64.057135][ T7398]  ? __virt_addr_valid+0x1c8/0x5c0
[   64.057144][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.057151][ T7398]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.057159][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.057165][ T7398]  ? lock_release+0x4b/0x3e0
[   64.057176][ T7398]  ? __virt_addr_valid+0x1c8/0x5c0
[   64.057184][ T7398]  ? __virt_addr_valid+0x4a5/0x5c0
[   64.057192][ T7398]  print_report+0xca/0x240
[   64.057198][ T7398]  ? rose_transmit_link+0x5c3/0x740
[   64.057206][ T7398]  kasan_report+0x118/0x150
[   64.057216][ T7398]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   64.057225][ T7398]  ? rose_transmit_link+0x5c3/0x740
[   64.057234][ T7398]  rose_transmit_link+0x5c3/0x740
[   64.057241][ T7398]  ? skb_put+0x11b/0x210
[   64.057266][ T7398]  rose_write_internal+0x11dc/0x1ac0
[   64.057278][ T7398]  ? __pfx_rose_write_internal+0x10/0x10
[   64.057307][ T7398]  ? __timer_delete+0x5d/0x390
[   64.057318][ T7398]  rose_release+0x24e/0x520
[   64.057326][ T7398]  sock_close+0xc3/0x240
[   64.057335][ T7398]  ? __pfx_sock_close+0x10/0x10
[   64.057343][ T7398]  __fput+0x44c/0xa70
[   64.057352][ T7398]  task_work_run+0x1d4/0x260
[   64.057362][ T7398]  ? __pfx_task_work_run+0x10/0x10
[   64.057372][ T7398]  ? kmem_cache_free+0x18f/0x400
[   64.057381][ T7398]  do_exit+0x6b5/0x2300
[   64.057391][ T7398]  ? do_raw_spin_lock+0x121/0x290
[   64.057414][ T7398]  ? __pfx_do_exit+0x10/0x10
[   64.057425][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.057432][ T7398]  do_group_exit+0x21c/0x2d0
[   64.057442][ T7398]  get_signal+0x1286/0x1340
[   64.057451][ T7398]  arch_do_signal_or_restart+0x9a/0x750
[   64.057462][ T7398]  ? __pfx_get_timespec64+0x10/0x10
[   64.057472][ T7398]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   64.057483][ T7398]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[   64.057493][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.057500][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.057506][ T7398]  exit_to_user_mode_loop+0x75/0x110
[   64.057516][ T7398]  do_syscall_64+0x2bd/0x3b0
[   64.057524][ T7398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.057531][ T7398]  ? exc_page_fault+0x9f/0xf0
[   64.057540][ T7398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.057547][ T7398] RIP: 0033:0x7fac1ebc14a5
[   64.057554][ T7398] Code: Unable to access opcode bytes at 0x7fac1ebc147b.
[   64.057558][ T7398] RSP: 002b:00007ffd8cd98ac0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[   64.057566][ T7398] RAX: 0000000000000000 RBX: 00007fac1edb5fa0 RCX: 00007fac1ebc14a5
[   64.057571][ T7398] RDX: 00007ffd8cd98b00 RSI: 0000000000000000 RDI: 0000000000000000
[   64.057575][ T7398] RBP: 00007fac1edb7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   64.057580][ T7398] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000f8c8
[   64.057584][ T7398] R13: 00007ffd8cd98c20 R14: ffffffffffffffff R15: 00007ffd8cd98c40
[   64.057592][ T7398]  </TASK>
[   64.057594][ T7398] 
[   64.163145][ T7398] Allocated by task 7399:
[   64.164594][ T7398]  kasan_save_track+0x3e/0x80
[   64.166142][ T7398]  __kasan_kmalloc+0x93/0xb0
[   64.167729][ T7398]  __kmalloc_cache_noprof+0x230/0x3d0
[   64.169564][ T7398]  rose_add_node+0x23a/0xde0
[   64.171169][ T7398]  rose_rt_ioctl+0xa48/0xfb0
[   64.172945][ T7398]  rose_ioctl+0x3ce/0x8b0
[   64.174425][ T7398]  sock_do_ioctl+0xdc/0x300
[   64.175950][ T7398]  sock_ioctl+0x576/0x790
[   64.177428][ T7398]  __se_sys_ioctl+0xfc/0x170
[   64.178939][ T7398]  do_syscall_64+0xfa/0x3b0
[   64.180506][ T7398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.182646][ T7398] 
[   64.183506][ T7398] Freed by task 7404:
[   64.184796][ T7398]  kasan_save_track+0x3e/0x80
[   64.186362][ T7398]  kasan_save_free_info+0x46/0x50
[   64.188018][ T7398]  __kasan_slab_free+0x5b/0x80
[   64.189589][ T7398]  kfree+0x18e/0x440
[   64.190927][ T7398]  rose_rt_device_down+0x473/0x4c0
[   64.192875][ T7398]  rose_device_event+0x603/0x6a0
[   64.194672][ T7398]  notifier_call_chain+0x1b6/0x3e0
[   64.196488][ T7398]  netif_close_many+0x29c/0x410
[   64.198107][ T7398]  netif_close+0x158/0x210
[   64.199806][ T7398]  dev_close+0x10a/0x220
[   64.201518][ T7398]  bpq_device_event+0x377/0x6a0
[   64.203501][ T7398]  notifier_call_chain+0x1b6/0x3e0
[   64.205668][ T7398]  __dev_notify_flags+0x18d/0x2e0
[   64.207803][ T7398]  netif_change_flags+0xe8/0x1a0
[   64.209692][ T7398]  dev_change_flags+0x130/0x260
[   64.211485][ T7398]  dev_ioctl+0x7b4/0x1150
[   64.213232][ T7398]  sock_do_ioctl+0x22c/0x300
[   64.215139][ T7398]  sock_ioctl+0x576/0x790
[   64.216816][ T7398]  __se_sys_ioctl+0xfc/0x170
[   64.218440][ T7398]  do_syscall_64+0xfa/0x3b0
[   64.220139][ T7398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.222318][ T7398] 
[   64.223105][ T7398] The buggy address belongs to the object at ffff88801f59dc00
[   64.223105][ T7398]  which belongs to the cache kmalloc-512 of size 512
[   64.228042][ T7398] The buggy address is located 50 bytes inside of
[   64.228042][ T7398]  freed 512-byte region [ffff88801f59dc00, ffff88801f59de00)
[   64.232809][ T7398] 
[   64.233784][ T7398] The buggy address belongs to the physical page:
[   64.236349][ T7398] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f59c
[   64.239845][ T7398] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   64.243258][ T7398] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   64.246083][ T7398] page_type: f5(slab)
[   64.247384][ T7398] raw: 00fff00000000040 ffff88801a441c80 ffffea0000ccba00 0000000000000003
[   64.250179][ T7398] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   64.253146][ T7398] head: 00fff00000000040 ffff88801a441c80 ffffea0000ccba00 0000000000000003
[   64.256113][ T7398] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   64.258881][ T7398] head: 00fff00000000002 ffffea00007d6701 00000000ffffffff 00000000ffffffff
[   64.261718][ T7398] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   64.264578][ T7398] page dumped because: kasan: bad access detected
[   64.266812][ T7398] page_owner tracks the page as allocated
[   64.268671][ T7398] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7229, tgid 7228 (syz.0.380), ts 61643630770, free_ts 59424995024
[   64.275256][ T7398]  post_alloc_hook+0x240/0x2a0
[   64.276853][ T7398]  get_page_from_freelist+0x21e4/0x22c0
[   64.278645][ T7398]  __alloc_frozen_pages_noprof+0x181/0x370
[   64.280510][ T7398]  alloc_pages_mpol+0x232/0x4a0
[   64.282061][ T7398]  allocate_slab+0x8a/0x370
[   64.283545][ T7398]  ___slab_alloc+0xbeb/0x1410
[   64.285068][ T7398]  __kmalloc_cache_noprof+0x296/0x3d0
[   64.286796][ T7398]  __genradix_ptr_alloc+0x352/0x4a0
[   64.288493][ T7398]  __genradix_prealloc+0x44/0x90
[   64.290103][ T7398]  sctp_stream_init+0x14b/0x440
[   64.292182][ T7398]  sctp_association_new+0x10dd/0x25f0
[   64.294451][ T7398]  sctp_connect_new_asoc+0x2c5/0x690
[   64.296698][ T7398]  sctp_sendmsg+0x155c/0x2810
[   64.298625][ T7398]  __sock_sendmsg+0x19c/0x270
[   64.300427][ T7398]  __sys_sendto+0x3bd/0x520
[   64.302071][ T7398]  __x64_sys_sendto+0xde/0x100
[   64.303688][ T7398] page last free pid 5290 tgid 5290 stack trace:
[   64.306232][ T7398]  __free_frozen_pages+0xbc4/0xd30
[   64.308500][ T7398]  __put_partials+0x156/0x1a0
[   64.310462][ T7398]  put_cpu_partial+0x17c/0x250
[   64.312455][ T7398]  __slab_free+0x2d5/0x3c0
[   64.314342][ T7398]  qlist_free_all+0x97/0x140
[   64.316309][ T7398]  kasan_quarantine_reduce+0x148/0x160
[   64.318593][ T7398]  __kasan_slab_alloc+0x22/0x80
[   64.320423][ T7398]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   64.322152][ T7398]  getname_flags+0xb8/0x540
[   64.323645][ T7398]  vfs_fstatat+0x43/0x170
[   64.325047][ T7398]  __x64_sys_newfstatat+0x116/0x190
[   64.326721][ T7398]  do_syscall_64+0xfa/0x3b0
[   64.328258][ T7398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.330517][ T7398] 
[   64.331540][ T7398] Memory state around the buggy address:
[   64.333909][ T7398]  ffff88801f59db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   64.337268][ T7398]  ffff88801f59db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   64.340256][ T7398] >ffff88801f59dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   64.343163][ T7398]                                      ^
[   64.345489][ T7398]  ffff88801f59dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   64.348918][ T7398]  ffff88801f59dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   64.352253][ T7398] ==================================================================
[   64.357031][ T7398] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   64.359425][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) 
[   64.362788][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.366542][ T7398] Call Trace:
[   64.367855][ T7398]  <TASK>
[   64.368982][ T7398]  dump_stack_lvl+0x99/0x250
[   64.370482][ T7398]  ? __asan_memcpy+0x40/0x70
[   64.372050][ T7398]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.373743][ T7398]  ? __pfx__printk+0x10/0x10
[   64.375448][ T7398]  vpanic+0x281/0x750
[   64.377118][ T7398]  ? __pfx_print_hex_dump+0x10/0x10
[   64.379343][ T7398]  ? __pfx_vpanic+0x10/0x10
[   64.381222][ T7398]  ? preempt_schedule_common+0x83/0xd0
[   64.383491][ T7398]  ? preempt_schedule+0xae/0xc0
[   64.385500][ T7398]  panic+0xb9/0xc0
[   64.386724][ T7398]  ? __pfx_panic+0x10/0x10
[   64.388298][ T7398]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.390926][ T7398]  ? rose_transmit_link+0x5c3/0x740
[   64.393058][ T7398]  check_panic_on_warn+0x89/0xb0
[   64.395074][ T7398]  ? rose_transmit_link+0x5c3/0x740
[   64.397196][ T7398]  end_report+0x78/0x160
[   64.398965][ T7398]  kasan_report+0x129/0x150
[   64.400879][ T7398]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   64.403401][ T7398]  ? rose_transmit_link+0x5c3/0x740
[   64.405136][ T7398]  rose_transmit_link+0x5c3/0x740
[   64.407092][ T7398]  ? skb_put+0x11b/0x210
[   64.408854][ T7398]  rose_write_internal+0x11dc/0x1ac0
[   64.410970][ T7398]  ? __pfx_rose_write_internal+0x10/0x10
[   64.413202][ T7398]  ? __timer_delete+0x5d/0x390
[   64.415179][ T7398]  rose_release+0x24e/0x520
[   64.417037][ T7398]  sock_close+0xc3/0x240
[   64.418764][ T7398]  ? __pfx_sock_close+0x10/0x10
[   64.420730][ T7398]  __fput+0x44c/0xa70
[   64.422344][ T7398]  task_work_run+0x1d4/0x260
[   64.424222][ T7398]  ? __pfx_task_work_run+0x10/0x10
[   64.426255][ T7398]  ? kmem_cache_free+0x18f/0x400
[   64.427987][ T7398]  do_exit+0x6b5/0x2300
[   64.429753][ T7398]  ? do_raw_spin_lock+0x121/0x290
[   64.431873][ T7398]  ? __pfx_do_exit+0x10/0x10
[   64.433808][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.435770][ T7398]  do_group_exit+0x21c/0x2d0
[   64.437704][ T7398]  get_signal+0x1286/0x1340
[   64.439600][ T7398]  arch_do_signal_or_restart+0x9a/0x750
[   64.441860][ T7398]  ? __pfx_get_timespec64+0x10/0x10
[   64.444013][ T7398]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   64.446108][ T7398]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[   64.448103][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.449677][ T7398]  ? rcu_is_watching+0x15/0xb0
[   64.451206][ T7398]  exit_to_user_mode_loop+0x75/0x110
[   64.452917][ T7398]  do_syscall_64+0x2bd/0x3b0
[   64.454419][ T7398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.456413][ T7398]  ? exc_page_fault+0x9f/0xf0
[   64.458249][ T7398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.460328][ T7398] RIP: 0033:0x7fac1ebc14a5
[   64.462009][ T7398] Code: Unable to access opcode bytes at 0x7fac1ebc147b.
[   64.464371][ T7398] RSP: 002b:00007ffd8cd98ac0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[   64.466966][ T7398] RAX: 0000000000000000 RBX: 00007fac1edb5fa0 RCX: 00007fac1ebc14a5
[   64.469511][ T7398] RDX: 00007ffd8cd98b00 RSI: 0000000000000000 RDI: 0000000000000000
[   64.472008][ T7398] RBP: 00007fac1edb7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   64.474545][ T7398] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000f8c8
[   64.477047][ T7398] R13: 00007ffd8cd98c20 R14: ffffffffffffffff R15: 00007ffd8cd98c40
[   64.479602][ T7398]  </TASK>
[   64.481330][ T7398] Kernel Offset: disabled
[   64.482736][ T7398] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:51:50  Registers:
info registers vcpu 0

CPU#0
RAX=467fed93efe04e00 RBX=ffffffff819683b8 RCX=467fed93efe04e00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38630 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f90a3ce7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000132 000000003832676c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=00000000000001e1 0000000038326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007767070
R8 =ffff888108990237 R9 =1ffff11021132046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd8f3 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577350500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc98a0e64a0 CR3=000000011cd6e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000165 00302d306e2f0030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000ff0000
XMM08=ffffffffffff0000 ff0000000000ff00 XMM09=2d78742f73657565 75712f306e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
