last executing test programs:

1.953864289s ago: executing program 2 (id=1146):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r1, 0xfffffffc) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={<r2=>0x0, 0xff}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r2, 0xdb18, 0x8, [0x4, 0x3e46, 0x0, 0x4, 0x9, 0xe, 0x6d30, 0x8]}, &(0x7f0000000340)=0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
syz_emit_ethernet(0x0, 0x0, 0x0) (rerun: 32)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r3, 0x0, 0x0) (async)
recvfrom$inet6(r1, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000080)=0x8) (rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000080)={r10, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) (async, rerun: 64)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x8}, 0x94) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a4e"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xb7, 0x4, 0xe, 0x0, 0x6, 0x6, 0x1ff, r10}, 0x20) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000004a072a09000000000000000002000100140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (rerun: 64)

1.951305941s ago: executing program 2 (id=1148):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000f6"], 0x0, 0x1a, 0x0, 0x8}, 0x28)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r11, 0x0)

1.939380209s ago: executing program 2 (id=1153):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb5", 0x87}], 0x100002d7, 0x0, 0xe4}, 0x20004804)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0xff, 0x4)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1.828942435s ago: executing program 2 (id=1155):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$l2tp(0x0, r2) (async)
syz_genetlink_get_family_id$l2tp(0x0, r2)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0xfffffffc) (async)
listen(r3, 0xfffffffc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c000000680004002dbd7000ffdbdf2500000200010000001a674db700000033330876367301f1000a0000000c936e78e8b77018cbd1dd6b0c93ac8c2902faf42bdae854870bb9ea65f65190aa1cda6d55e06c0e2e4d3375d272b50ef57b6e98050464fa22669f21013306525a6d8aabd3787e2dc954fa99f47ee61afefd9b29ff676e9abd6f226412e66c0f9f13c008dee8c40b"], 0x2c}, 0x1, 0x0, 0x0, 0xa57eed1b17934db}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0xffffffffffffffce)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r7, 0x25, 0x8, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r7, 0x25, 0x8, @void}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10)
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4811)
sendto(r10, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000003800)=""/4104, 0x1008}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000b80)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x9}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

1.29171094s ago: executing program 0 (id=1168):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r9, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r8], 0x68}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r13, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r12, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r13}, 0x20)

900.744796ms ago: executing program 2 (id=1169):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000380)="30996bf5648471191d30b302e03da35539500b3889c8fc52a70eff605178adcab67ab5399de54b99ca097222f41367b1476d502116a92171fd764782005eb45f947165e8a568199149f7c8671b80af226d1aeefcbd307cc2d17a45733220cc74d8e861785cb70064c21d42964721", &(0x7f0000000400)=""/204, &(0x7f0000000500)="1b2e968de28a2421a4846a4fe50ce24a4456745672346e6e8b4b9d6565cd5df168e3b499141ca9cfac97876cdff0d40cd9b1dae2e1f960034abaedeee67194879a724ac60a05a2f9bb03a4264351b7d819c62696f2fb204e6d8700acaec62112783471cfe575a942c7ade6d60b0606c5d6f6919ee079edc61d0615d046edc1ff4c0559b93f0d2c7572e788611eb708fb", &(0x7f0000000f40)="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", 0x10001, r2}, 0x38)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)

791.035864ms ago: executing program 2 (id=1170):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25030000000000000000160000001400018001006574683a76657468305f74000000000019000000"], 0x5f}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000025000a140000001000010000000000000000000000000a000000000000"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r7], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400"/16], 0x28}}, 0x0)
recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0c00000004cb6bf71690f56fff00000004ff8ad0d07748ab4a73e6000010", @ANYRES32, @ANYBLOB="0300"/20, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="1000"/28], 0x50)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r13, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r12, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r13}, 0x20)

545.063349ms ago: executing program 1 (id=1172):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025004a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003340000000c0a01020000000000000000010000000900020073797a320000000008000440000000020900010073797a3000000000140000001000010000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
r10 = epoll_create1(0x0)
epoll_pwait(r10, &(0x7f0000000140)=[{}], 0x1, 0x1ff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000240)={0x40000001})
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

429.88939ms ago: executing program 0 (id=1173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000240)=0x5, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r4=>0x0})
socketpair(0x2a, 0x800, 0xfffffffa, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x3, 0x3}, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003e000701fedaffff00000030c19eef00b676a9f5cf7faac908004280040008000400018009000280"], 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x11, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000540)={<r12=>r7, 0x7, 0x0, 0x9})
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r9)
sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r13, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x36}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000010)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x8000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x700ca}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080)
sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x5, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, ' \a'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x8800)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r14=>0x0})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r14, @ANYBLOB="0c00990002000000250000000800260080090000080001000d00000008009f00010000000500180108000000"], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r15, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c3cb7661cfbd2d250b235a4aeb"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}}, 0x44)

331.001645ms ago: executing program 1 (id=1174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40641, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd050056000800543b000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b8002944291189ef12e09f5746a5fb830c16edc7fa01ac1c7f211d5c4289156c58f9e14bc90625217944284a404e6ec9e273952598132729d795d50e039262e6238eecb8025908a5b64d40b8726b476245598b9d6f6158bfc95c032c454306d38a104e7725ada576714aec5f27a06565a9b6cf89c181aa74553df7eade8738359a6ea1fe15b155694f95ca7f4b977df3f0579751c0"], 0xfdef)

309.143946ms ago: executing program 0 (id=1175):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000611418000000000004000000000000009500000000000000d851fe5986630bb9812fab1fc547598906ce293974b01707015be9ffe9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000e0001006e0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', <r8=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r8], 0x22c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00', <r9=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x64, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000080000000500000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r10}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r10, &(0x7f0000000340), 0x0}, 0x20)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e1f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000009c11ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20009c90780100000002000000d84d1ce0a1956e72f2a8ea59bc15a79f6629889c1c9e797445951af9a910e9787b2b57f84cdc5231b2f7e7b201da4c4f7c7f6df569801d62e278e0bbc133150935f2510b90ec950f1863167f2772a901f25a9bc1f9ca93807e2cf143354b61422891f1ab82234e88636f094f320c85a847ba33f4828170b512a7edc5a352e18d36bd51bce88ef76e7c905c6c"], 0xd6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff00000000711012000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x880}, 0x0)

200.757393ms ago: executing program 1 (id=1176):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x1}, 0x0, 0x7f}}, @TCA_TBF_BURST={0x8, 0x6, 0xa815}]}}]}, 0x60}}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}]}}]}, 0x3c}}, 0x400c4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) (async)
socket$packet(0x11, 0x2, 0x300) (async)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000004700)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004600)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf25030000000900010073797a300000000014000200626f6e643000000000000000000000000900030073797a32000000000900030073797a30000000001f000400010000000900030073797a32000000000900010073797a3100000000050004000100000005000400010000000900010073797a3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4021) (async)
socket(0x10, 0x3, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x2, 0x24000045) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10)

199.428899ms ago: executing program 0 (id=1177):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0)
connect$vsock_stream(r3, &(0x7f00000012c0)={0x28, 0x0, 0x2711, @local}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r8 = socket$inet6(0x10, 0x2, 0x6)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
sendto$inet6(r8, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x34, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0xa}, {0x0, 0x6}, {0x1b, 0x3}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

198.718741ms ago: executing program 1 (id=1178):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000006800020027bd7000fbdbdf25000003000a2c3b28961800000014000600e0000001000000000000000000000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000006800020027bd7000fbdbdf25000003000a2c3b28961800000014000600e0000001000000000000000000000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd23, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x5, 0x6}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd23, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x5, 0x6}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000)
r9 = socket$caif_stream(0x25, 0x1, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r9})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) (async)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r11, 0x0) (async)
listen(r11, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r10, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r11}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

10.704729ms ago: executing program 0 (id=1179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1f0000000c000000324900007f00000091190400", @ANYRES32, @ANYBLOB="fcffffff000000000000000000000000000000009564d5e079b3a5364bdddd88ffbebc4a81ac4c294c924f2a22e7c5361f409e266bea075babbcec292a3926ad175a903b86c8163a67928f19f9d20748935d2be009015992f2868963c1ac7facb77c229f8b96f7b8c1d17c72f7b64149591d25cccb0a77c49a966d3457faf5b9a40280bae19d6fb2da98d87a0bdcc864071a3e851c8cb9d5880c3ff291aeaa4783414a0906978b0bbd81fd98bc9ebb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14010000120020002bbd7000fbdbdf2511bc7f064e214e24060000000500000006000000040000000100000029f000000500000007000000", @ANYRES32=0x0, @ANYRES8=r0], 0x114}, 0x1, 0x0, 0x0, 0x4048085}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="009500"/24], 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100007fe}, 0x94)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="400100001000130428bd700000000000ac1414aa000000000000000000000000ac1e0101000000000000000000000000002000074e2400000a0020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x804)
socketpair(0x3, 0x2, 0x5, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1002, 0x3a, 0x5, 0x0, 0xffffffff}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYRES16=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xdd, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e08895b029a130112b92121f9ae0dd972fa104edcce40d8df657e06b87e9437c71b3d0a9c75ede4df13f233eee075bf52aae578ebc7850860b39c133b93c9a0ea4b7c70afb972d1aec73f1cf6c8f2c76e078760fec3d033a3a7a5c058d4a21ea6eac8a0e9298bb464c50fbfaff13460b63003a720d47e56512cc4b9e1787d50f7a81e335c48cd033294b94a1cf2aa1a449dcfa1e6796871e2cb82aaccbb94984bfc09bef15dba866e919547ce2166ca0a5b348383cb67a6300000000000000", 0x0, 0x0, 0x60000000, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8eba}, 0x50)
write(r6, &(0x7f0000000140)="24000000010006", 0x7)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r10, 0x0, 0x0)
sendto$rose(r4, &(0x7f0000000080)="b9b4adce71e2f7cebd7353b667bcc2572b202e", 0x13, 0x20000404, 0x0, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r11, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, @null, @bpq0, 0x16, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bond0\x00'})

3.330835ms ago: executing program 1 (id=1180):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000cd850000080080009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x1000, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r3 = socket$inet(0x2, 0x3, 0x6)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000380)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x28, {0x2, 0x4e22, @rand_addr=0x64010100}, 'bridge0\x00'}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000004000000040000001200000080000000", @ANYRES32, @ANYBLOB="0000200000000000000200000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x800) (async, rerun: 32)
shutdown(r5, 0x1) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x8, 0x30, 0xfffffffffffffffd, 0x2040000fffffffc}, &(0x7f0000000080)=0x18) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e22, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x88) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0, r6}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r8=>0xffffffffffffffff}) (async, rerun: 64)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x0, 0xbb, 0x0, &(0x7f0000000140)=""/187, 0x8, 0x0, 0x50, 0x29, 0x0, &(0x7f0000000500)="1cd1627c3e9f87be213a06e18fbfcb8dac68370f08e86da7e075354a457a709c0d56a186a05320e550", 0xd, 0x0, 0x7}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="000100000000000002004e22ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002004e230a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff00000000000000000000000000000000000000000000000000000000000000fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e226401010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000002004e22ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000002000"/656], 0x290) (async, rerun: 32)
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRESDEC=r7, @ANYRES32, @ANYRES64=r6, @ANYRES32=r8, @ANYRES32, @ANYRES16=r6, @ANYRES32=r4, @ANYRES8, @ANYRESHEX=r4, @ANYBLOB="9a60082791b06d5e8cb09280d2f33e63b9f5bfb7100e15d57b7e3211a24f978f34ca910a3ea6f6b698153b1ef7c7c9106249230492c473611f7c207e27fd0a7d825faf91da9026cf822707eb31c9c4c45461493de8acbf8b4f1c3a7ee550813aefa52fdf19d159cebc0bb8c7aee2cdc628415364935d91aff769a29644ec6f983641f9e5a712cf3742b99db903e47860249d6d635e7f74ebee7eeb3be03e1acaf5f1b2ce205e0d52af03db38510450045750da2569ef956ccdd49603211f4069ebafb19c6c7afce16a97a9df4ffea4597b9fd1e4012dba8447d88000610ef1d9", @ANYRES8=r0], 0x50) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

2.735622ms ago: executing program 0 (id=1181):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0) (async)
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb6269627a552d4859df62043f1f64e58a9e2003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce1656c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace2a5b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d21000000aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec74e132c073d4ccab5915e5dff504893cf26034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28dae9fe8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead0", @ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb6269627a552d4859df62043f1f64e58a9e2003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce1656c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace2a5b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d21000000aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec74e132c073d4ccab5915e5dff504893cf26034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28dae9fe8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead0", @ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
socket$key(0xf, 0x3, 0x2) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="020900090251ffe34062250b1bdbdf2583e9cb1ca6afa64a94dbdeaf3573a0e5b4f1dd8975ac5a6b453e9bc24dc9bf415e89f5e0aa81f534f053968601cb1de2d912a1b38f37759ebf8a5e10ce720520c76214"], 0x10}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)

0s ago: executing program 1 (id=1182):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0xf0bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x9014)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b405525ee7c8ed801cdb7d0826b64425a6743f234e1bb5bf0969c97c514a22f3ca455b48591eb9541f06b60ae321bb7929", @ANYRESHEX=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x400c095}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448c9, 0x0)
sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000180)="5440caa287f3778894bb87ab40e30af2c3e6d4d14053d588f13464ba78f9136f50fc376cbaa57ca583288d768cee60fef7a96366e2e42fab59", 0x39}], 0x2}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10695' (ED25519) to the list of known hosts.
syzkaller login: [   48.309681][ T5771] cgroup: Unknown subsys name 'net'
[   48.459453][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.463372][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.523419][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.243786][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.248981][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.254027][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.258210][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.261416][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.264926][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.268298][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.271522][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.306247][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.311018][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.311323][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.318007][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.321536][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.325185][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.328284][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.625124][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.674927][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.699161][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.801793][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.805248][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.808784][ T5841] bridge_slave_0: entered allmulticast mode
[   55.811856][ T5841] bridge_slave_0: entered promiscuous mode
[   55.856944][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.859378][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.861794][ T5841] bridge_slave_1: entered allmulticast mode
[   55.865300][ T5841] bridge_slave_1: entered promiscuous mode
[   55.879016][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.881998][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.884899][ T5845] bridge_slave_0: entered allmulticast mode
[   55.889091][ T5845] bridge_slave_0: entered promiscuous mode
[   55.892967][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.897171][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.900112][ T5849] bridge_slave_0: entered allmulticast mode
[   55.903917][ T5849] bridge_slave_0: entered promiscuous mode
[   55.908459][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.911381][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.914261][ T5849] bridge_slave_1: entered allmulticast mode
[   55.918282][ T5849] bridge_slave_1: entered promiscuous mode
[   55.935258][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.938178][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.940653][ T5845] bridge_slave_1: entered allmulticast mode
[   55.943894][ T5845] bridge_slave_1: entered promiscuous mode
[   55.968225][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.982521][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.003906][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.011718][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.031892][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.038092][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.083697][ T5841] team0: Port device team_slave_0 added
[   56.088530][ T5845] team0: Port device team_slave_0 added
[   56.092148][ T5841] team0: Port device team_slave_1 added
[   56.108992][ T5849] team0: Port device team_slave_0 added
[   56.115069][ T5849] team0: Port device team_slave_1 added
[   56.133130][ T5845] team0: Port device team_slave_1 added
[   56.168020][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.170819][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.181070][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.210994][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.213308][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.221262][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.225119][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.227677][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.235860][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.243503][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.247413][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.256651][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.266516][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.268730][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.286580][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.291262][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.293971][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.304559][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.398896][ T5841] hsr_slave_0: entered promiscuous mode
[   56.401347][ T5841] hsr_slave_1: entered promiscuous mode
[   56.416827][ T5845] hsr_slave_0: entered promiscuous mode
[   56.419717][ T5845] hsr_slave_1: entered promiscuous mode
[   56.423167][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   56.426170][ T5845] Cannot create hsr debugfs directory
[   56.432012][ T5849] hsr_slave_0: entered promiscuous mode
[   56.434558][ T5849] hsr_slave_1: entered promiscuous mode
[   56.436964][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.438828][ T5849] Cannot create hsr debugfs directory
[   56.783349][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.793835][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.800003][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.815275][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.862663][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.868957][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.875876][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.890317][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.932059][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.937537][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.949481][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.954698][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.041474][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.071646][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.088090][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.091056][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.104893][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.112872][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.115805][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.136638][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.157921][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.160831][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.174509][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.177263][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.192077][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.228160][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.253628][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.256305][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.269328][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.271682][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.318528][   T54] Bluetooth: hci0: command tx timeout
[   57.380803][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.396757][   T54] Bluetooth: hci1: command tx timeout
[   57.397425][ T5842] Bluetooth: hci2: command tx timeout
[   57.423764][ T5849] veth0_vlan: entered promiscuous mode
[   57.430870][ T5849] veth1_vlan: entered promiscuous mode
[   57.456106][ T5849] veth0_macvtap: entered promiscuous mode
[   57.462149][ T5849] veth1_macvtap: entered promiscuous mode
[   57.473544][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.481473][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.491103][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.498209][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.513048][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.530451][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.544440][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.590177][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.618211][ T5845] veth0_vlan: entered promiscuous mode
[   57.622927][  T903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.627995][  T903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.648599][ T5845] veth1_vlan: entered promiscuous mode
[   57.661062][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.664542][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.688237][ T5841] veth0_vlan: entered promiscuous mode
[   57.694164][ T5841] veth1_vlan: entered promiscuous mode
[   57.710294][ T5845] veth0_macvtap: entered promiscuous mode
[   57.721646][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.725166][ T5841] veth0_macvtap: entered promiscuous mode
[   57.731240][ T5845] veth1_macvtap: entered promiscuous mode
[   57.739103][ T5841] veth1_macvtap: entered promiscuous mode
[   57.757814][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.766701][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.769884][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.782597][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.789694][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.801495][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.804557][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.817535][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.822144][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.834338][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.838810][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.841940][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.933459][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.936501][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.994630][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.005213][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.076811][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.081362][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.099950][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.103670][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.113945][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.115064][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.118396][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.126364][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.173144][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.178739][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.219303][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.221802][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.287889][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.296774][ T5914] netlink: 'syz.0.4': attribute type 7 has an invalid length.
[   58.309999][ T5914] netlink: 'syz.0.4': attribute type 8 has an invalid length.
[   58.312464][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.481627][ T5938] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.485338][ T5938] ..0: renamed from hsr0
[   58.496658][ T5938] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.500752][ T5938] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.504999][ T5938] ..0: entered allmulticast mode
[   58.507634][ T5938] hsr_slave_0: entered allmulticast mode
[   58.509923][ T5938] hsr_slave_1: entered allmulticast mode
[   58.513738][ T5938] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   58.537331][ T5939] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   58.540561][ T5939] syzkaller1: entered allmulticast mode
[   59.261032][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.291197][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.293945][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.357510][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.364948][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.405848][ T5842] Bluetooth: hci0: command tx timeout
[   59.445103][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.475941][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.477743][ T5842] Bluetooth: hci2: command tx timeout
[   59.480864][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.486740][ T5842] Bluetooth: hci1: command tx timeout
[   59.487297][ T5955] hsr_slave_0: left promiscuous mode
[   59.491325][ T5955] hsr_slave_1: left promiscuous mode
[   59.520262][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.523860][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.615236][ T5960] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   59.622586][ T5960] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   59.685989][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.690542][ T5961] ..0: left allmulticast mode
[   59.692712][ T5961] hsr_slave_0: left allmulticast mode
[   59.695058][ T5961] hsr_slave_1: left allmulticast mode
[   59.710503][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   60.424257][ T5965] netlink: 'syz.1.12': attribute type 13 has an invalid length.
[   60.545113][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.547702][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.591420][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.682479][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.702198][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.912322][ T5971] syzkaller0: entered promiscuous mode
[   60.914272][ T5971] syzkaller0: entered allmulticast mode
[   60.920881][ T5870] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.925321][ T5870] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.953575][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   60.957087][ T5870] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.961175][ T5870] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.134326][ T5982] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   61.138856][ T5983] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   61.475665][ T5842] Bluetooth: hci0: command tx timeout
[   61.555682][ T5842] Bluetooth: hci2: command tx timeout
[   61.565726][ T5842] Bluetooth: hci1: command tx timeout
[   61.754235][ T5994] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   61.813664][ T5995] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   61.818221][ T5995] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   61.821449][ T5995] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   61.824644][ T5995] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   61.832923][ T5995] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   62.038934][ T6014] Zero length message leads to an empty skb
[   62.044659][ T6014] warning: `syz.0.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.179337][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.197341][ T6027] 8021q: VLANs not supported on ip6tnl0
[   62.303365][ T6036] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   62.312142][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   62.425187][ T6046] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   63.293860][ T6078] dummy0: entered promiscuous mode
[   63.297142][ T6078] bond0: entered promiscuous mode
[   63.299467][ T6078] bond_slave_0: entered promiscuous mode
[   63.302045][ T6078] bond_slave_1: entered promiscuous mode
[   63.308702][ T6078] dummy0: left promiscuous mode
[   63.312224][ T6078] bond0: left promiscuous mode
[   63.313942][ T6078] bond_slave_0: left promiscuous mode
[   63.316176][ T6078] bond_slave_1: left promiscuous mode
[   63.480210][ T6088] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   63.492228][ T6090] __nla_validate_parse: 3 callbacks suppressed
[   63.492239][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'.
[   63.555997][ T5842] Bluetooth: hci0: command tx timeout
[   63.617992][ T6098] validate_nla: 21 callbacks suppressed
[   63.618013][ T6098] netlink: 'syz.1.48': attribute type 178 has an invalid length.
[   63.635774][ T5842] Bluetooth: hci1: command tx timeout
[   63.636674][   T54] Bluetooth: hci2: command tx timeout
[   63.728266][ T6112] geneve2: entered promiscuous mode
[   63.729892][ T6112] geneve2: entered allmulticast mode
[   63.921587][ T6127] 8021q: VLANs not supported on vxcan1
[   63.940015][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'.
[   64.123153][ T6141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.186289][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'.
[   64.590980][ T6171] geneve2: entered promiscuous mode
[   64.593117][ T6171] geneve2: entered allmulticast mode
[   64.601314][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[   64.604777][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[   64.608369][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[   64.611238][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[   64.630879][ T6173] netlink: 'syz.2.71': attribute type 8 has an invalid length.
[   64.638475][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'.
[   64.648315][ T6173] bond0: entered promiscuous mode
[   64.650063][ T6173] bond_slave_0: entered promiscuous mode
[   64.652189][ T6173] bond_slave_1: entered promiscuous mode
[   64.654959][ T6173] bond0: left promiscuous mode
[   64.657048][ T6173] bond_slave_0: left promiscuous mode
[   64.658871][ T6173] bond_slave_1: left promiscuous mode
[   64.829460][ T6193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.848678][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[   64.851461][ T6196] bridge_slave_1: left allmulticast mode
[   64.857049][ T6196] bridge_slave_1: left promiscuous mode
[   64.859069][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.864520][ T6196] bridge_slave_0: left allmulticast mode
[   64.868090][ T6196] bridge_slave_0: left promiscuous mode
[   64.870263][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.947901][ T6202] syzkaller0: entered promiscuous mode
[   64.949828][ T6202] syzkaller0: entered allmulticast mode
[   64.967101][ T6199] netlink: 'syz.2.78': attribute type 13 has an invalid length.
[   65.138111][ T6209] netlink: 'syz.0.81': attribute type 4 has an invalid length.
[   65.141153][ T6208] netlink: 'syz.0.81': attribute type 4 has an invalid length.
[   65.180996][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[   65.196034][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[   65.198857][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[   65.201614][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[   65.232010][ T6217] macvtap1: entered promiscuous mode
[   65.234311][ T6217] veth1_to_hsr: entered promiscuous mode
[   65.238856][ T6217] macvtap1: entered allmulticast mode
[   65.243470][ T6217] veth1_to_hsr: entered allmulticast mode
[   65.247824][ T6217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.84'.
[   65.251302][ T6217] netlink: 'syz.1.84': attribute type 7 has an invalid length.
[   65.254373][ T6217] netlink: 'syz.1.84': attribute type 8 has an invalid length.
[   65.257686][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'.
[   65.265881][ T6217] ip6gretap0: entered promiscuous mode
[   65.268934][ T6217] ip6gretap0: left promiscuous mode
[   65.290511][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[   65.296574][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.301562][ T6224] netlink: 3 bytes leftover after parsing attributes in process `syz.0.86'.
[   65.309241][ T6224] batadv1: entered promiscuous mode
[   65.311186][ T6224] batadv1: entered allmulticast mode
[   65.522063][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   65.760251][ T6253] bond0: entered promiscuous mode
[   65.761981][ T6253] bond_slave_0: entered promiscuous mode
[   65.770082][ T6253] bond_slave_1: entered promiscuous mode
[   65.777866][ T6253] batadv0: entered promiscuous mode
[   65.784320][ T6253] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   65.792396][ T6253] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   65.807680][ T6253] 8021q: adding VLAN 0 to HW filter on device hsr0
[   65.921214][ T6262] netlink: 'syz.2.94': attribute type 29 has an invalid length.
[   65.929387][ T6260] netlink: 'syz.2.94': attribute type 29 has an invalid length.
[   65.938394][ T6260] netlink: 'syz.2.94': attribute type 29 has an invalid length.
[   66.024358][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.029006][ T6266] 8021q: adding VLAN 0 to HW filter on device team0
[   66.034685][ T6266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.143753][ T6270] geneve2: left promiscuous mode
[   66.145619][ T6270] geneve2: left allmulticast mode
[   66.323935][ T6279] Bluetooth: MGMT ver 1.23
[   66.797008][ T6266] syz.1.95 (6266) used greatest stack depth: 19512 bytes left
[   67.121683][ T6299] geneve2: left promiscuous mode
[   67.123280][ T6299] geneve2: left allmulticast mode
[   67.128008][ T6299] veth1_to_hsr: left allmulticast mode
[   67.129727][ T6299] veth1_to_hsr: left promiscuous mode
[   67.131971][ T6299] macvtap1: left promiscuous mode
[   67.133562][ T6299] macvtap1: left allmulticast mode
[   67.251830][ T6312] dummy0: entered promiscuous mode
[   67.254283][ T6312] batadv_slave_0: entered promiscuous mode
[   67.257365][ T6312] batadv_slave_0: left promiscuous mode
[   67.259986][ T6312] dummy0: left promiscuous mode
[   67.433783][ T6326] team_slave_1: Caught tx_queue_len zero misconfig
[   67.472147][ T6333] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   67.673638][ T6349] hsr_slave_0: left promiscuous mode
[   67.686303][ T6349] hsr_slave_1: left promiscuous mode
[   67.710427][ T6351] bond0: entered promiscuous mode
[   67.712289][ T6351] bond_slave_0: entered promiscuous mode
[   67.714084][ T6351] bond_slave_1: entered promiscuous mode
[   67.726388][ T6351] batadv0: entered promiscuous mode
[   67.740434][ T6351] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   67.743645][ T6351] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   67.750019][ T6351] 8021q: adding VLAN 0 to HW filter on device hsr1
[   67.761697][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.787522][ T6359] syz_tun: entered promiscuous mode
[   67.795746][ T6359] syz_tun: left promiscuous mode
[   67.821245][ T6363] Illegal XDP return value 4294967289 on prog  (id 31) dev N/A, expect packet loss!
[   67.880709][ T6368] bond0: entered promiscuous mode
[   67.882633][ T6368] bond_slave_0: entered promiscuous mode
[   67.884497][ T6368] bond_slave_1: entered promiscuous mode
[   67.891791][ T6368] bond0: left promiscuous mode
[   67.893930][ T6368] bond_slave_0: left promiscuous mode
[   67.896952][ T6368] bond_slave_1: left promiscuous mode
[   67.968331][ T6381] bridge_slave_0: left allmulticast mode
[   67.970124][ T6381] bridge_slave_0: left promiscuous mode
[   67.972182][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.990494][ T6381] bridge_slave_1: left allmulticast mode
[   67.992705][ T6381] bridge_slave_1: left promiscuous mode
[   67.994655][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.009631][ T6381] bond0: (slave bond_slave_0): Releasing backup interface
[   68.025974][ T6381] bond0: (slave bond_slave_1): Releasing backup interface
[   68.034385][ T6381] team0: Port device team_slave_0 removed
[   68.041943][ T6381] team0: Port device team_slave_1 removed
[   68.044306][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.048458][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.051653][ T6387] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   68.264864][ T6399] hsr_slave_0: left promiscuous mode
[   68.270076][ T6399] hsr_slave_1: left promiscuous mode
[   68.374741][ T6412] !: renamed from dummy0
[   68.502473][ T6419] __nla_validate_parse: 18 callbacks suppressed
[   68.502484][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'.
[   68.515634][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'.
[   68.744465][ T6429] validate_nla: 10 callbacks suppressed
[   68.744479][ T6429] netlink: 'syz.1.148': attribute type 178 has an invalid length.
[   68.826877][ T6432] netlink: 'syz.1.149': attribute type 8 has an invalid length.
[   68.829379][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'.
[   68.832335][ T6433] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   68.866415][ T6439] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   69.686159][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'.
[   69.689261][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'.
[   69.779895][ T6456] x_tables: ip_tables: udp match: only valid for protocol 17
[   69.789937][ T6456] netlink: 344 bytes leftover after parsing attributes in process `syz.0.156'.
[   69.800665][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.803235][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'.
[   69.813517][ T6461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.959782][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[   70.218147][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.165'.
[   70.901978][ T6509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'.
[   71.153959][ T6528] netlink: 'syz.1.172': attribute type 6 has an invalid length.
[   71.240899][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.243112][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.310998][ T6535] netlink: 'syz.2.175': attribute type 3 has an invalid length.
[   71.405878][ T6542] netlink: 'syz.2.178': attribute type 7 has an invalid length.
[   71.409317][ T6542] netlink: 'syz.2.178': attribute type 8 has an invalid length.
[   71.420882][ T6540] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   71.440159][ T6540] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   71.450347][ T6540] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   71.461858][ T6540] netlink: 'syz.1.176': attribute type 29 has an invalid length.
[   71.508966][ T6547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.512877][ T6547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.517657][ T6547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.646080][ T6557] gretap0: entered promiscuous mode
[   71.649058][ T6557] gretap0: left promiscuous mode
[   71.658351][ T6558] gretap0: entered promiscuous mode
[   71.660986][ T6558] gretap0: left promiscuous mode
[   71.856809][ T6564] bond0: entered promiscuous mode
[   71.859960][ T6564] batadv0: entered promiscuous mode
[   71.862957][ T6564] debugfs: 'hsr0' already exists in 'hsr'
[   71.865376][ T6564] Cannot create hsr debugfs directory
[   71.868595][ T6564] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   71.872423][ T6564] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   71.879382][ T6564] 8021q: adding VLAN 0 to HW filter on device hsr0
[   72.279875][ T6613] bond0: left promiscuous mode
[   72.282073][ T6613] batadv0: left promiscuous mode
[   72.422688][ T6632] geneve3: entered promiscuous mode
[   72.424438][ T6632] geneve3: entered allmulticast mode
[   72.428314][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[   72.431155][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[   72.435156][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[   72.439660][ T6634] tc_dump_action: action bad kind
[   72.442757][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.460461][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[   72.463483][ T6634] tc_dump_action: action bad kind
[   73.597957][ T6698] __nla_validate_parse: 25 callbacks suppressed
[   73.597967][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[   73.610217][ T6698] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   73.613251][ T6698] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   73.638980][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[   73.645004][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'.
[   73.751136][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[   73.755016][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[   73.762202][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[   73.768115][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[   73.803283][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'.
[   73.820150][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'.
[   73.842843][ T6713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.224'.
[   73.894377][ T6720] validate_nla: 34 callbacks suppressed
[   73.894393][ T6720] netlink: 'syz.2.226': attribute type 178 has an invalid length.
[   73.980705][ T6723] netlink: 9 bytes leftover after parsing attributes in process `syz.0.224'.
[   74.709915][ T6739] netlink: 'syz.0.230': attribute type 15 has an invalid length.
[   75.710732][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.773181][ T6760] geneve3: left promiscuous mode
[   75.774820][ T6760] geneve3: left allmulticast mode
[   75.826730][ T6766] netlink: 144 bytes leftover after parsing attributes in process `syz.1.239'.
[   75.952171][ T6781] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   75.982398][ T6789] netlink: 9 bytes leftover after parsing attributes in process `syz.0.241'.
[   76.024689][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'.
[   76.072339][ T6801] netlink: 'syz.2.248': attribute type 21 has an invalid length.
[   76.125821][ T6806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   76.131553][ T6807] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   76.177885][ T6815] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   76.184824][ T6815] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   76.189183][ T6815] hsr0: entered promiscuous mode
[   76.190966][ T6815] hsr0: entered allmulticast mode
[   76.192832][ T6815] bond0: entered allmulticast mode
[   76.194432][ T6815] bond_slave_0: entered allmulticast mode
[   76.196727][ T6815] bond_slave_1: entered allmulticast mode
[   76.198803][ T6815] batadv0: entered allmulticast mode
[   76.200812][ T6815] 8021q: adding VLAN 0 to HW filter on device hsr0
[   76.521785][ T6831] netlink: 'syz.2.255': attribute type 4 has an invalid length.
[   76.592221][ T6833] netlink: 'syz.2.256': attribute type 8 has an invalid length.
[   76.672757][ T6842] Bluetooth: MGMT ver 1.23
[   76.744107][ T6849] netlink: 'syz.2.260': attribute type 1 has an invalid length.
[   76.771469][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.804467][ T6848] bond1: (slave veth3): Enslaving as an active interface with a down link
[   76.863754][ T6853] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[   77.064897][ T6870] netlink: 'syz.1.266': attribute type 13 has an invalid length.
[   77.320226][ T6890] hsr0: left promiscuous mode
[   77.329858][ T6890] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   77.392639][ T6899] xfrm0: Caught tx_queue_len zero misconfig
[   77.457725][ T6907] bond0: entered promiscuous mode
[   77.570546][ T6919] netlink: 'syz.0.281': attribute type 3 has an invalid length.
[   77.718154][ T6932] bond0: left promiscuous mode
[   77.722566][ T6932] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[   77.789663][ T6936] gretap0: entered promiscuous mode
[   77.797416][ T6938] netlink: 'syz.2.288': attribute type 7 has an invalid length.
[   77.798381][ T6936] gretap0: left promiscuous mode
[   77.855172][ T6939] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   77.864528][ T6939] netlink: 'syz.2.288': attribute type 16 has an invalid length.
[   78.630921][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.734408][ T6973] __nla_validate_parse: 17 callbacks suppressed
[   78.734423][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[   78.809873][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'.
[   78.851152][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'.
[   78.881332][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'.
[   78.965292][ T6998] netlink: 10 bytes leftover after parsing attributes in process `syz.0.303'.
[   79.037494][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[   79.139284][ T7018] validate_nla: 1 callbacks suppressed
[   79.139296][ T7018] netlink: 'syz.1.310': attribute type 2 has an invalid length.
[   79.143771][ T7018] netlink: 'syz.1.310': attribute type 2 has an invalid length.
[   79.154147][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'.
[   79.168839][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[   79.172418][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'.
[   79.177067][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'.
[   79.183437][ T7019] veth0: entered promiscuous mode
[   79.189495][ T7019] veth0: left promiscuous mode
[   79.197049][ T7024] netlink: 'syz.0.312': attribute type 29 has an invalid length.
[   79.201951][ T7024] netlink: 'syz.0.312': attribute type 29 has an invalid length.
[   79.273747][ T7024] syz_tun: entered promiscuous mode
[   79.276457][ T7024] syz_tun: left promiscuous mode
[   79.503889][ T7049] syzkaller1: entered promiscuous mode
[   79.507002][ T7049] syzkaller1: entered allmulticast mode
[   79.774306][ T7059] team_slave_1: Caught tx_queue_len zero misconfig
[   79.855283][ T7059] netlink: 'syz.1.322': attribute type 21 has an invalid length.
[   79.858097][ T7059] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   80.181186][ T7070] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   80.411266][ T7079] dummy0: entered promiscuous mode
[   80.413742][ T7079] dummy0: left promiscuous mode
[   80.570557][ T7086] netlink: 'syz.2.331': attribute type 8 has an invalid length.
[   80.573260][ T7091] netlink: 'syz.2.331': attribute type 8 has an invalid length.
[   80.623540][ T7093] tipc: Started in network mode
[   80.626002][ T7093] tipc: Node identity d2d661ae3bab, cluster identity 4711
[   80.628406][ T7093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.632474][ T7093] syzkaller0: MTU too low for tipc bearer
[   80.634336][ T7093] tipc: Disabling bearer <eth:syzkaller0>
[   81.442826][ T7132] bond0: entered promiscuous mode
[   81.445067][ T7132] bond0: left promiscuous mode
[   81.486600][    T9] cfg80211: failed to load regulatory.db
[   81.499673][ T7135] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   81.507218][ T7137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   81.804973][ T7162] openvswitch: netlink: EtherType 50a is less than min 600
[   82.036326][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.331008][ T7209] IPVS: set_ctl: invalid protocol: 59 172.20.20.53:20003
[   83.167911][ T7230] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   83.284017][ T7248] netlink: 'syz.2.376': attribute type 64 has an invalid length.
[   83.345262][ T7251] ieee802154 phy0 wpan0: encryption failed: -126
[   83.406657][ T7254] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20004
[   84.181699][ T7258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.198261][ T7260] lo: Caught tx_queue_len zero misconfig
[   84.214270][ T7258] __nla_validate_parse: 37 callbacks suppressed
[   84.214287][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'.
[   84.223049][ T7258] netlink: 'syz.2.378': attribute type 7 has an invalid length.
[   84.228981][ T7258] netlink: 'syz.2.378': attribute type 8 has an invalid length.
[   84.233051][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[   84.242129][ T7258] bridge0: entered promiscuous mode
[   84.244913][ T7258] ip6gretap0: entered promiscuous mode
[   84.248118][ T7258] bridge0: left promiscuous mode
[   84.252049][ T7258] ip6gretap0: left promiscuous mode
[   84.262013][ T7260] netlink: 'syz.1.379': attribute type 13 has an invalid length.
[   84.345930][ T7268] netlink: 'syz.2.381': attribute type 12 has an invalid length.
[   84.351806][ T7270] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   84.357218][ T7270] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   84.460845][ T7280] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   84.519936][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[   84.560167][ T7295] netlink: 'syz.2.386': attribute type 4 has an invalid length.
[   84.564226][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.386'.
[   84.641281][ T7299] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   84.672413][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[   84.711592][ T7306] : renamed from vlan0
[   84.725336][ T7306] netlink: 9 bytes leftover after parsing attributes in process `syz.2.390'.
[   84.732123][ T7307] pim6reg: entered allmulticast mode
[   84.735186][ T7307] pim6reg: left allmulticast mode
[   84.787406][ T7308] netlink: 80 bytes leftover after parsing attributes in process `syz.1.389'.
[   84.885369][ T7316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.393'.
[   84.929194][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'.
[   85.014890][ T7325] hsr0: left allmulticast mode
[   85.023598][ T7325] bond0: left allmulticast mode
[   85.025256][ T7325] bond_slave_0: left allmulticast mode
[   85.027668][ T7325] bond_slave_1: left allmulticast mode
[   85.029808][ T7325] batadv0: left allmulticast mode
[   85.032490][ T7327] bond0: Caught tx_queue_len zero misconfig
[   85.120242][ T7329] netlink: 'syz.0.398': attribute type 178 has an invalid length.
[   85.167131][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'.
[   85.261532][ T7349] ipvlan2: entered promiscuous mode
[   85.436989][   T47] IPVS: starting estimator thread 0...
[   85.525618][ T7369] IPVS: using max 63 ests per chain, 151200 per kthread
[   85.586718][ T7381] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   85.589611][ T7381] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   85.592252][ T7381] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   85.594809][ T7381] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   86.407336][ T7410] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[   86.412849][    T9] IPVS: starting estimator thread 0...
[   86.505706][ T7415] IPVS: using max 63 ests per chain, 151200 per kthread
[   86.568905][ T7420] sctp: [Deprecated]: syz.2.419 (pid 7420) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.568905][ T7420] Use struct sctp_sack_info instead
[   86.647910][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.658509][ T7422] can: request_module (can-proto-0) failed.
[   87.034808][ T7460] bond0: entered promiscuous mode
[   87.037389][ T7460] bond0: left promiscuous mode
[   87.559148][ T7489] bond0: left promiscuous mode
[   87.560816][ T7489] bond_slave_0: left promiscuous mode
[   87.562626][ T7489] bond_slave_1: left promiscuous mode
[   87.565127][ T7489] batadv0: left promiscuous mode
[   88.265429][ T7498] bond0: (slave vlan0): Opening slave failed
[   88.310509][ T7505] bond1: entered promiscuous mode
[   88.406581][ T7517] erspan0: entered promiscuous mode
[   88.409612][ T7517] gretap0: entered promiscuous mode
[   88.412589][ T7517] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[   88.417058][ T7517] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[   88.695855][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.698784][ T7541] 8021q: adding VLAN 0 to HW filter on device team0
[   88.703535][ T7541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.741751][ T7543] ipvlan2: left promiscuous mode
[   88.802764][ T7546] bond0: entered promiscuous mode
[   88.805929][ T7546] bond0: left promiscuous mode
[   89.019020][ T7555] bond1: left promiscuous mode
[   89.441645][ T7564] __nla_validate_parse: 20 callbacks suppressed
[   89.441659][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'.
[   89.488195][ T7566] bond0: entered promiscuous mode
[   89.490315][ T7566] bond_slave_0: entered promiscuous mode
[   89.492893][ T7566] bond_slave_1: entered promiscuous mode
[   89.499241][ T7566] batadv0: entered promiscuous mode
[   89.502844][ T7566] debugfs: 'hsr1' already exists in 'hsr'
[   89.505237][ T7566] Cannot create hsr debugfs directory
[   89.510110][ T7566] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   89.513942][ T7566] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   89.518658][ T7566] 8021q: adding VLAN 0 to HW filter on device hsr1
[   89.790327][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.458'.
[   89.793697][ T7582] hsr0: entered promiscuous mode
[   89.795551][ T7582] hsr0: entered allmulticast mode
[   89.797210][ T7582] erspan0: entered allmulticast mode
[   89.798981][ T7582] gretap0: entered allmulticast mode
[   89.811303][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'.
[   89.909251][ T7590] hsr0: left promiscuous mode
[   89.911119][ T7590] hsr0: left allmulticast mode
[   89.912946][ T7590] erspan0: left allmulticast mode
[   89.914755][ T7590] gretap0: left allmulticast mode
[   90.096490][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.462'.
[   90.120163][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[   90.124028][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.465'.
[   90.135798][ T7611] netlink: 56 bytes leftover after parsing attributes in process `syz.2.465'.
[   90.148807][ T7611] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   90.152091][ T7611] gretap1: entered promiscuous mode
[   90.153746][ T7611] gretap1: entered allmulticast mode
[   90.163218][ T7600] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[   90.291347][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'.
[   90.298430][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.466'.
[   90.369589][ T7627] validate_nla: 24 callbacks suppressed
[   90.369601][ T7627] netlink: 'syz.1.469': attribute type 13 has an invalid length.
[   90.467640][ T5870] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   90.581532][ T7647] gretap1: left promiscuous mode
[   91.251776][ T7650] netlink: 'syz.1.475': attribute type 13 has an invalid length.
[   91.326311][ T7653] netlink: 'syz.2.476': attribute type 8 has an invalid length.
[   91.328921][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[   91.333059][ T7655] netlink: 'syz.0.474': attribute type 6 has an invalid length.
[   91.428696][ T7660] gretap0: entered promiscuous mode
[   91.431328][ T7660] gretap0: left promiscuous mode
[   91.764022][ T7677] netlink: 'syz.2.483': attribute type 13 has an invalid length.
[   91.954738][ T7683] gretap1: left allmulticast mode
[   91.965230][ T7683] erspan0: left promiscuous mode
[   91.967752][ T7683] gretap0: left promiscuous mode
[   92.052757][ T7686] ip6tnl0: Caught tx_queue_len zero misconfig
[   92.082339][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.321844][ T7710] block nbd0: not configured, cannot reconfigure
[   92.516175][ T7727] bond0: entered promiscuous mode
[   92.519078][ T7727] batadv0: entered promiscuous mode
[   92.522394][ T7727] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   92.526392][ T7727] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   92.531996][ T7727] 8021q: adding VLAN 0 to HW filter on device hsr0
[   92.542088][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.554500][ T7724] syzkaller0: entered promiscuous mode
[   92.557846][ T7724] syzkaller0: entered allmulticast mode
[   93.467815][ T7771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.695119][ T7783] netlink: 'syz.0.514': attribute type 13 has an invalid length.
[   93.864460][ T7790] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[   94.221980][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.272956][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.671585][ T7863] __nla_validate_parse: 21 callbacks suppressed
[   94.671596][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'.
[   94.676960][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'.
[   94.687599][ T7863] netlink: 'syz.2.532': attribute type 13 has an invalid length.
[   94.688138][ T7865] netlink: 'syz.1.534': attribute type 2 has an invalid length.
[   94.709943][ T7865] : entered promiscuous mode
[   95.335363][ T7871] netlink: 'syz.0.536': attribute type 13 has an invalid length.
[   95.476783][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.538'.
[   95.756458][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[   95.760134][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[   95.770964][ T7893] erspan0: entered promiscuous mode
[   95.774736][ T7893] gretap0: entered promiscuous mode
[   95.777476][ T7893] debugfs: 'hsr0' already exists in 'hsr'
[   95.779323][ T7893] Cannot create hsr debugfs directory
[   95.781478][ T7893] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[   95.785186][ T7893] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[   95.795301][ T7894] netlink: 'syz.0.544': attribute type 4 has an invalid length.
[   95.823309][ T7896] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   95.870800][ T7904] netlink: 'syz.0.547': attribute type 1 has an invalid length.
[   95.984054][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'.
[   96.979898][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'.
[   97.029113][ T7940] netlink: 'syz.0.552': attribute type 4 has an invalid length.
[   97.036591][ T7940] netlink: 'syz.0.552': attribute type 83 has an invalid length.
[   97.204118][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.557'.
[   97.208723][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'.
[   97.211969][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'.
[   97.214903][ T7946] netlink: 'syz.0.557': attribute type 7 has an invalid length.
[   97.217752][ T7946] netlink: 'syz.0.557': attribute type 8 has an invalid length.
[   97.434671][ T7964] netlink: 'syz.1.562': attribute type 178 has an invalid length.
[   97.590464][ T7975] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[   97.651731][ T7981] netlink: 'syz.2.567': attribute type 1 has an invalid length.
[   97.654665][ T7982] netlink: 'syz.2.567': attribute type 1 has an invalid length.
[   97.692431][ T7981] bond2: (slave bridge5): making interface the new active one
[   97.696442][ T7981] bond2: (slave bridge5): Enslaving as an active interface with an up link
[   97.704070][ T7981] lo: Caught tx_queue_len zero misconfig
[   97.719317][ T7982] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   98.283847][ T8026] bond0: left promiscuous mode
[   98.287719][ T8026] batadv0: left promiscuous mode
[   98.811441][ T8069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.001842][ T8081] erspan0: left promiscuous mode
[   99.005151][ T8081] gretap0: left promiscuous mode
[   99.157138][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.754861][ T8127] __nla_validate_parse: 18 callbacks suppressed
[   99.754872][ T8127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'.
[   99.966895][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[   99.970928][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'.
[   99.974676][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'.
[   99.987774][ T8153] erspan0: entered promiscuous mode
[   99.991936][ T8153] erspan0: left promiscuous mode
[  100.113465][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'.
[  100.379438][ T8165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.589216][ T5870] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  100.592491][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[  100.607601][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[  100.708549][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[  100.889634][ T8187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.619'.
[  101.020742][ T8193] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  101.025157][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.228178][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.622'.
[  101.342293][ T8204] validate_nla: 6 callbacks suppressed
[  101.342311][ T8204] netlink: 'syz.0.624': attribute type 23 has an invalid length.
[  101.359242][ T8208] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  101.592738][ T8227] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  101.725395][ T8238] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  101.729927][ T8238] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  101.951678][ T8259] bond0: entered promiscuous mode
[  101.954792][ T8259] batadv0: entered promiscuous mode
[  101.961121][ T8259] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  101.965055][ T8259] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  101.971840][ T8259] 8021q: adding VLAN 0 to HW filter on device hsr0
[  101.986222][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.331154][ T8290] gretap0: entered promiscuous mode
[  102.333951][ T8290] gretap0: left promiscuous mode
[  102.449945][ T8304] netlink: 'syz.1.650': attribute type 4 has an invalid length.
[  102.506316][ T8311] netlink: 'syz.0.652': attribute type 8 has an invalid length.
[  102.562607][ T8314] tipc: Started in network mode
[  102.564780][ T8314] tipc: Node identity 5a13f8e8e92d, cluster identity 4711
[  102.568421][ T8314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.572093][ T8314] syzkaller0: entered promiscuous mode
[  102.574449][ T8314] syzkaller0: entered allmulticast mode
[  102.612557][ T8314] tipc: Resetting bearer <eth:syzkaller0>
[  102.628028][ T8313] tipc: Resetting bearer <eth:syzkaller0>
[  102.636776][ T8313] tipc: Disabling bearer <eth:syzkaller0>
[  102.837487][ T8329] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  103.393674][ T8339] openvswitch: netlink: Key type 16144 is out of range max 32
[  103.700110][ T8346] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  103.711194][ T8346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  103.712668][ T8348] 8021q: VLANs not supported on gre0
[  104.017396][ T8362] netlink: zone id is out of range
[  104.019654][ T8362] netlink: zone id is out of range
[  104.022896][ T8362] netlink: zone id is out of range
[  104.025338][ T8362] netlink: zone id is out of range
[  104.039674][ T8362] netlink: zone id is out of range
[  104.294866][ T8377] block nbd1: not configured, cannot reconfigure
[  104.559159][ T8387] netlink: 'syz.0.675': attribute type 10 has an invalid length.
[  105.268221][ T8395] __nla_validate_parse: 21 callbacks suppressed
[  105.268231][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  105.273731][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  105.281762][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  105.290781][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[  105.358853][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'.
[  105.378173][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  105.443018][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.456984][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.527016][ T8422] netlink: 52 bytes leftover after parsing attributes in process `syz.1.683'.
[  105.535642][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[  105.551983][ T8424] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  105.714978][ T8432] gretap0: entered promiscuous mode
[  105.719850][ T8432] gretap0: left promiscuous mode
[  105.949002][ T8453] netlink: 'syz.0.693': attribute type 7 has an invalid length.
[  105.956869][ T8453] netlink: 'syz.0.693': attribute type 8 has an invalid length.
[  106.183757][ T8479] netlink: 'syz.1.701': attribute type 29 has an invalid length.
[  106.186715][ T8479] netlink: 'syz.1.701': attribute type 29 has an invalid length.
[  106.189584][ T8479] netlink: 'syz.1.701': attribute type 29 has an invalid length.
[  106.192568][ T8479] netlink: 'syz.1.701': attribute type 29 has an invalid length.
[  106.389901][ T8498] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  106.502839][ T8523] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.574268][ T8523] bond2 (unregistering): Released all slaves
[  106.647784][ T8531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  106.726925][ T8537] can: request_module (can-proto-4) failed.
[  107.071045][ T8552] validate_nla: 1 callbacks suppressed
[  107.071056][ T8552] netlink: 'syz.0.717': attribute type 2 has an invalid length.
[  107.078443][ T8552] netlink: 'syz.0.717': attribute type 178 has an invalid length.
[  107.246324][ T8568] netlink: 'syz.2.722': attribute type 12 has an invalid length.
[  107.302600][ T8569] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.313942][ T8569] net_ratelimit: 3 callbacks suppressed
[  107.313965][ T8569] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.540933][ T8592] bond0: left promiscuous mode
[  107.543682][ T8592] batadv0: left promiscuous mode
[  107.654270][ T8599] netlink: 'syz.0.731': attribute type 3 has an invalid length.
[  107.759639][ T8611] batadv1: entered promiscuous mode
[  107.761332][ T8611] batadv1: entered allmulticast mode
[  107.847540][ T8616] netlink: 'syz.0.735': attribute type 29 has an invalid length.
[  107.860388][ T8616] netlink: 'syz.0.735': attribute type 29 has an invalid length.
[  107.863223][ T8616] netlink: 'syz.0.735': attribute type 29 has an invalid length.
[  107.866099][ T8616] netlink: 'syz.0.735': attribute type 29 has an invalid length.
[  107.868748][ T8616] netlink: 'syz.0.735': attribute type 29 has an invalid length.
[  107.874988][ T8616] netlink: 'syz.0.735': attribute type 29 has an invalid length.
[  108.529040][ T8621] bond0 (unregistering): left promiscuous mode
[  108.531263][ T8621] bond_slave_0: left promiscuous mode
[  108.533286][ T8621] bond_slave_1: left promiscuous mode
[  108.536993][ T8621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.541533][ T8621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.544906][ T8621] bond0 (unregistering): Released all slaves
[  108.913730][ T8645] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  108.923540][ T8645] netdevsim0: mtu less than device minimum
[  109.140557][ T8667] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  109.523735][ T8696] openvswitch: netlink: Key type 145 is out of range max 32
[  109.532281][ T8696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  110.401174][ T8714] bond0: entered promiscuous mode
[  110.403612][ T8714] batadv0: entered promiscuous mode
[  110.406859][ T8714] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  110.410623][ T8714] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  110.414589][ T8714] 8021q: adding VLAN 0 to HW filter on device hsr0
[  110.427688][ T8714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.506476][ T8719] __nla_validate_parse: 36 callbacks suppressed
[  110.506488][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  110.692858][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'.
[  110.696007][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'.
[  110.702822][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'.
[  110.705759][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'.
[  110.711656][ T8731] gretap0: entered promiscuous mode
[  110.714205][ T8731] gretap0: left promiscuous mode
[  110.788341][ T8736] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.770'.
[  111.916999][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.961588][ T8761] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  112.062800][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'.
[  112.066468][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'.
[  112.167960][ T8782] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  112.210316][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[  112.213857][ T8785] netlink: 26 bytes leftover after parsing attributes in process `syz.0.783'.
[  112.371893][ T8798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.375032][ T8798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.407044][ T8798] batadv0 (unregistering): left promiscuous mode
[  112.440658][ T8802] tipc: Started in network mode
[  112.442225][ T8802] tipc: Node identity 169be6bacd95, cluster identity 8
[  112.444739][ T8802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.454610][ T8802] syzkaller0: entered promiscuous mode
[  112.457208][ T8802] syzkaller0: entered allmulticast mode
[  112.476275][ T8802] tipc: Resetting bearer <eth:syzkaller0>
[  112.530006][ T8801] tipc: Resetting bearer <eth:syzkaller0>
[  112.556069][ T8801] tipc: Disabling bearer <eth:syzkaller0>
[  112.899042][ T8823] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  113.117869][ T8837] validate_nla: 26 callbacks suppressed
[  113.117974][ T8837] netlink: 'syz.0.798': attribute type 8 has an invalid length.
[  113.352280][ T8851] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  113.774008][ T8862] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR
[  113.779877][ T8861] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_cmd_wq": -EINTR
[  113.949264][ T8895] netlink: 'syz.1.806': attribute type 13 has an invalid length.
[  114.176612][ T8904] netlink: 'syz.1.809': attribute type 8 has an invalid length.
[  114.636558][ T8937] netlink: 'syz.1.816': attribute type 13 has an invalid length.
[  115.042699][ T8943] netlink: 'syz.1.818': attribute type 7 has an invalid length.
[  115.046388][ T8943] netlink: 'syz.1.818': attribute type 8 has an invalid length.
[  115.247079][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.360684][ T8975] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  115.644447][ T9004] __nla_validate_parse: 23 callbacks suppressed
[  115.644458][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'.
[  115.649856][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'.
[  115.813422][ T9011] syzkaller1: tun_chr_ioctl cmd 1074025677
[  115.815657][ T9011] syzkaller1: linktype set to 823
[  115.918680][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.951427][ T9017] netlink: 72 bytes leftover after parsing attributes in process `syz.1.836'.
[  116.007602][ T9024] netlink: 'syz.1.836': attribute type 8 has an invalid length.
[  116.010217][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'.
[  116.135918][ T9033] netlink: 'syz.2.839': attribute type 29 has an invalid length.
[  116.142718][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  116.150680][ T9033] netlink: 'syz.2.839': attribute type 29 has an invalid length.
[  116.153552][ T9033] netlink: 'syz.2.839': attribute type 29 has an invalid length.
[  116.311044][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.841'.
[  116.321156][ T9045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.842'.
[  116.381668][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'.
[  116.837610][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'.
[  116.873579][ T9081] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.879943][ T9081] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.004424][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'.
[  117.272180][ T9110] tipc: Can't bind to reserved service type 1
[  117.383882][ T9124] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.407275][ T9124] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  117.489575][ T9127] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  117.569823][ T9137] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  117.573215][ T9137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.619300][ T9141] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  118.143512][ T9182] validate_nla: 33 callbacks suppressed
[  118.143528][ T9182] netlink: 'syz.0.884': attribute type 7 has an invalid length.
[  118.149741][ T9182] netlink: 'syz.0.884': attribute type 8 has an invalid length.
[  118.161763][ T9182] ip6gretap0: entered promiscuous mode
[  118.165332][ T9182] syz_tun: entered promiscuous mode
[  118.169606][ T9182] ip6gretap0: left promiscuous mode
[  118.172421][ T9182] syz_tun: left promiscuous mode
[  118.351212][ T9192] netlink: 'syz.2.887': attribute type 7 has an invalid length.
[  118.354047][ T9192] netlink: 'syz.2.887': attribute type 8 has an invalid length.
[  118.361199][ T9192] ip6gretap0: entered promiscuous mode
[  118.364263][ T9192] syz_tun: entered promiscuous mode
[  118.368863][ T9192] ip6gretap0: left promiscuous mode
[  118.371187][ T9192] syz_tun: left promiscuous mode
[  118.641672][ T9216] netlink: 'syz.2.893': attribute type 7 has an invalid length.
[  118.644177][ T9216] netlink: 'syz.2.893': attribute type 8 has an invalid length.
[  118.886696][ T9235] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  119.000492][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.361288][ T9262] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  119.503245][ T9267] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  119.799766][ T9286] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  119.843755][ T9290] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  120.164407][ T9319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.333714][ T9331] netlink: 'syz.0.924': attribute type 178 has an invalid length.
[  120.417440][ T9337] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  120.513097][ T9342] bridge0: port 1(macsec0) entered blocking state
[  120.515914][ T9342] bridge0: port 1(macsec0) entered disabled state
[  120.519403][ T9342] macsec0: entered allmulticast mode
[  120.523726][ T9342] macsec0: entered promiscuous mode
[  120.718800][ T9350] __nla_validate_parse: 39 callbacks suppressed
[  120.718811][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'.
[  120.764092][ T9354] netlink: 112 bytes leftover after parsing attributes in process `syz.2.931'.
[  120.903521][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.934'.
[  120.917700][ T9362] syz_tun: entered promiscuous mode
[  121.037416][ T9321] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  121.109852][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'.
[  121.122602][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'.
[  121.129433][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'.
[  121.164627][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'.
[  121.169288][ T9378] syz_tun: left promiscuous mode
[  121.184650][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'.
[  121.188478][ T9378] bond0: left promiscuous mode
[  121.190685][ T9378] batadv0: left promiscuous mode
[  121.337207][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'.
[  121.377286][ T9391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'.
[  121.414987][ T9399] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  121.424411][ T9399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  121.534620][ T9406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.544892][ T9402] bond0: option all_slaves_active: invalid value (3)
[  121.548021][ T9402] bond0: option all_slaves_active: invalid value (3)
[  121.551277][ T9402] bond0: option all_slaves_active: invalid value (3)
[  121.554201][ T9402] bond0: option all_slaves_active: invalid value (3)
[  121.627239][ T9414] netlink: 'syz.1.948': attribute type 2 has an invalid length.
[  121.629777][ T9414] netlink: 'syz.1.948': attribute type 1 has an invalid length.
[  121.678030][ T9417] geneve1: Caught tx_queue_len zero misconfig
[  121.696460][ T9418] dummy0: entered promiscuous mode
[  121.699652][ T9418] batadv_slave_0: entered promiscuous mode
[  121.702291][ T9418] batadv_slave_0: left promiscuous mode
[  121.704821][ T9418] dummy0: left promiscuous mode
[  121.832400][ T9428] netlink: 'syz.2.953': attribute type 6 has an invalid length.
[  121.932151][ T9439] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  121.942921][ T9440] openvswitch: netlink: Key type 29 is not supported
[  122.130555][ T9461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.220752][ T9468] dummy0: entered promiscuous mode
[  122.223806][ T9468] batadv_slave_0: entered promiscuous mode
[  122.229267][ T9468] batadv_slave_0: left promiscuous mode
[  122.231733][ T9468] dummy0: left promiscuous mode
[  122.860065][ T9522] gretap0: entered promiscuous mode
[  122.863403][ T9522] gretap0: left promiscuous mode
[  122.896829][ T9525] lo: Caught tx_queue_len zero misconfig
[  122.973869][ T9534] smc: net device bond0 applied user defined pnetid SYZ
[  122.987275][ T9535] dummy0: entered promiscuous mode
[  122.990433][ T9535] team0: entered promiscuous mode
[  122.992088][ T9535] team_slave_0: entered promiscuous mode
[  122.994034][ T9535] team_slave_1: entered promiscuous mode
[  122.997448][ T9535] dummy0: left promiscuous mode
[  122.999844][ T9535] team0: left promiscuous mode
[  123.001402][ T9535] team_slave_0: left promiscuous mode
[  123.003256][ T9535] team_slave_1: left promiscuous mode
[  123.184088][ T9546] validate_nla: 6 callbacks suppressed
[  123.184103][ T9546] netlink: 'syz.0.989': attribute type 13 has an invalid length.
[  123.297340][ T9554] netlink: 'syz.2.991': attribute type 1 has an invalid length.
[  123.733057][ T9571] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:0
[  124.481788][ T9587] netlink: 'syz.0.1002': attribute type 4 has an invalid length.
[  124.716169][ T9601] openvswitch: netlink: IP tunnel dst address not specified
[  124.720820][ T9601] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  124.758285][ T9595] bridge_slave_1: left allmulticast mode
[  124.760266][ T9595] bridge_slave_1: left promiscuous mode
[  124.762525][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.770010][ T9595] bridge_slave_0: left allmulticast mode
[  124.774233][ T9595] bridge_slave_0: left promiscuous mode
[  124.780355][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.987578][ T9626] tun0: tun_chr_ioctl cmd 2147767521
[  125.250206][ T9653] netlink: 'syz.0.1015': attribute type 7 has an invalid length.
[  125.253263][ T9653] netlink: 'syz.0.1015': attribute type 8 has an invalid length.
[  125.279265][ T9653] ip6gretap0: entered promiscuous mode
[  125.282202][ T9653] syz_tun: entered promiscuous mode
[  125.288800][ T9653] ip6gretap0: left promiscuous mode
[  125.292352][ T9653] syz_tun: left promiscuous mode
[  125.384824][ T9664] netlink: 'syz.0.1019': attribute type 7 has an invalid length.
[  125.389637][ T9664] netlink: 'syz.0.1019': attribute type 8 has an invalid length.
[  125.547011][ T9680] ieee802154 phy0 wpan0: encryption failed: -22
[  125.666469][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.792975][ T9694] __nla_validate_parse: 40 callbacks suppressed
[  125.792992][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  125.800454][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  125.814798][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'.
[  125.863288][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'.
[  125.868256][ T9698] netlink: 'syz.2.1029': attribute type 7 has an invalid length.
[  125.871530][ T9698] netlink: 'syz.2.1029': attribute type 8 has an invalid length.
[  125.874849][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  125.887132][ T9698] ip6gretap0: entered promiscuous mode
[  125.890464][ T9698] syz_tun: entered promiscuous mode
[  125.893965][ T9698] ip6gretap0: left promiscuous mode
[  125.897837][ T9698] syz_tun: left promiscuous mode
[  125.982764][ T9700] netlink: 'syz.2.1030': attribute type 13 has an invalid length.
[  126.074579][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1031'.
[  126.111065][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'.
[  126.294088][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'.
[  126.298076][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'.
[  126.462218][ T9720] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  126.494167][ T9720] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1037'.
[  126.705089][ T9735] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  128.294876][ T9790] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  128.313540][ T9792] bond0: Caught tx_queue_len zero misconfig
[  128.459605][ T9803] validate_nla: 2 callbacks suppressed
[  128.459620][ T9803] netlink: 'syz.1.1058': attribute type 10 has an invalid length.
[  128.461222][ T9807] netlink: 'syz.2.1059': attribute type 10 has an invalid length.
[  128.480478][ T9803] team0: Port device dummy0 added
[  128.523169][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.562552][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.639163][ T9811] ip6_vti0: Caught tx_queue_len zero misconfig
[  128.642349][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.645159][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.650986][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.654533][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.659206][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.661813][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  128.664450][ T9811] netlink: 'syz.1.1061': attribute type 29 has an invalid length.
[  129.413529][ T9844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.419291][ T9843] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.424271][ T9844] syzkaller0: entered promiscuous mode
[  129.426789][ T9844] syzkaller0: entered allmulticast mode
[  129.443754][ T9843] tipc: Resetting bearer <eth:syzkaller0>
[  129.528857][ T9842] tipc: Resetting bearer <eth:syzkaller0>
[  129.545699][ T9842] tipc: Disabling bearer <eth:syzkaller0>
[  130.803847][ T9886] __nla_validate_parse: 16 callbacks suppressed
[  130.803858][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'.
[  130.839097][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'.
[  130.841818][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'.
[  130.848711][ T9895] ip6gretap0: entered promiscuous mode
[  130.851040][ T9895] syz_tun: entered promiscuous mode
[  130.855380][ T9895] ip6gretap0: left promiscuous mode
[  130.859305][ T9895] syz_tun: left promiscuous mode
[  130.991372][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'.
[  131.089766][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'.
[  131.210915][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'.
[  131.219667][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'.
[  131.244296][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'.
[  131.267272][ T9922] netlink: 'syz.1.1090': attribute type 11 has an invalid length.
[  131.286575][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'.
[  131.441613][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  131.550320][ T9937] tipc: New replicast peer: 255.255.255.255
[  131.553490][ T9937] tipc: Enabled bearer <udp:s>, priority 10
[  131.556124][ T9938] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  131.750939][ T9950] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  131.785275][ T9955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.788652][ T9955] syzkaller0: entered promiscuous mode
[  131.791095][ T9955] syzkaller0: entered allmulticast mode
[  131.804253][ T9955] tipc: Resetting bearer <eth:syzkaller0>
[  131.883820][ T9953] tipc: Resetting bearer <eth:syzkaller0>
[  131.898646][ T9953] tipc: Disabling bearer <eth:syzkaller0>
[  132.383072][T10022] macsec0: left allmulticast mode
[  132.385032][T10022] macsec0: left promiscuous mode
[  132.390358][T10022] bridge0: port 1(macsec0) entered disabled state
[  132.678980][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.837567][   T10] tipc: Node number set to 3007248616
[  133.475045][T10137] validate_nla: 38 callbacks suppressed
[  133.475056][T10137] netlink: 'syz.1.1132': attribute type 10 has an invalid length.
[  133.549907][T10144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  133.779713][T10152] netlink: 'syz.1.1136': attribute type 4 has an invalid length.
[  134.146486][T10173] netlink: 'syz.0.1141': attribute type 10 has an invalid length.
[  134.150212][T10173] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  134.234828][T10177] netlink: 'syz.0.1143': attribute type 101 has an invalid length.
[  134.239177][T10177] netlink: 'syz.0.1143': attribute type 7 has an invalid length.
[  134.283187][T10185] gtp0: entered allmulticast mode
[  134.289279][T10185] gtp1: entered allmulticast mode
[  134.457509][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.549188][T10151] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  162.513695][T10216] __nla_validate_parse: 30 callbacks suppressed
[  162.513711][T10216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1151'.
[  162.603767][T10225] netlink: 'syz.0.1156': attribute type 178 has an invalid length.
[  162.634144][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'.
[  162.740749][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'.
[  162.756266][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[  162.835014][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'.
[  162.854265][T10259] team0: Refused to change device type
[  162.902140][T10260] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1164'.
[  163.182714][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'.
[  163.187465][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'.
[  163.245407][T10283] gtp0: left allmulticast mode
[  163.247810][T10283] gtp1: left allmulticast mode
[  163.552765][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.643792][T10293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'.
[  163.686311][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  164.015001][T10311] netlink: 'syz.0.1173': attribute type 9 has an invalid length.
[  164.025019][T10311] netlink: 'syz.0.1173': attribute type 7 has an invalid length.
[  164.030920][T10311] netlink: 'syz.0.1173': attribute type 8 has an invalid length.
[  164.383562][T10340] netlink: 'syz.1.1180': attribute type 10 has an invalid length.
[  164.433392][T10345] ==================================================================
[  164.436484][T10345] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  164.439679][T10345] Read of size 1 at addr ffff888113208330 by task syz.0.1181/10345
[  164.443867][T10345] 
[  164.444860][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.0.1181 Not tainted syzkaller #0 PREEMPT(full) 
[  164.444877][T10345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.444886][T10345] Call Trace:
[  164.444892][T10345]  <TASK>
[  164.444898][T10345]  dump_stack_lvl+0x189/0x250
[  164.444926][T10345]  ? __kasan_check_byte+0x12/0x40
[  164.444945][T10345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.444959][T10345]  ? lock_release+0x4b/0x3e0
[  164.444979][T10345]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.444995][T10345]  print_report+0xca/0x240
[  164.445007][T10345]  ? __xfrm_state_insert+0x8af/0x1450
[  164.445026][T10345]  kasan_report+0x118/0x150
[  164.445043][T10345]  ? __xfrm_state_insert+0x8af/0x1450
[  164.445063][T10345]  __xfrm_state_insert+0x8af/0x1450
[  164.445082][T10345]  ? xfrm_state_insert+0x44/0x60
[  164.445100][T10345]  xfrm_state_insert+0x54/0x60
[  164.445116][T10345]  ipcomp6_init_state+0x655/0x900
[  164.445133][T10345]  __xfrm_init_state+0xa76/0x13f0
[  164.445146][T10345]  ? __xfrm_init_state+0x7ef/0x13f0
[  164.445158][T10345]  xfrm_init_state+0x18/0xa0
[  164.445175][T10345]  pfkey_add+0x1d38/0x2e00
[  164.445197][T10345]  ? __pfx_pfkey_add+0x10/0x10
[  164.445209][T10345]  ? kmem_cache_free+0x18f/0x400
[  164.445228][T10345]  pfkey_sendmsg+0xbfe/0x1090
[  164.445247][T10345]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  164.445269][T10345]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.445281][T10345]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.445294][T10345]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  164.445309][T10345]  __sock_sendmsg+0x21c/0x270
[  164.445328][T10345]  ____sys_sendmsg+0x52d/0x830
[  164.445345][T10345]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.445391][T10345]  ? import_iovec+0x74/0xa0
[  164.445410][T10345]  ___sys_sendmsg+0x21f/0x2a0
[  164.445425][T10345]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.445450][T10345]  ? __fget_files+0x2a/0x420
[  164.445462][T10345]  ? __fget_files+0x3a0/0x420
[  164.445475][T10345]  __sys_sendmmsg+0x227/0x430
[  164.445493][T10345]  ? __pfx___sys_sendmmsg+0x10/0x10
[  164.445507][T10345]  ? do_futex+0x333/0x420
[  164.445525][T10345]  ? fdget+0x184/0x1e0
[  164.445542][T10345]  ? rcu_is_watching+0x15/0xb0
[  164.445557][T10345]  __x64_sys_sendmmsg+0xa0/0xc0
[  164.445573][T10345]  do_syscall_64+0xfa/0x3b0
[  164.445588][T10345]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.445601][T10345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.445614][T10345]  ? exc_page_fault+0x9f/0xf0
[  164.445626][T10345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.445639][T10345] RIP: 0033:0x7f872d58ec29
[  164.445653][T10345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.445664][T10345] RSP: 002b:00007f872e47a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  164.445678][T10345] RAX: ffffffffffffffda RBX: 00007f872d7d5fa0 RCX: 00007f872d58ec29
[  164.445687][T10345] RDX: 000000000400008a RSI: 0000200000000180 RDI: 000000000000000b
[  164.445696][T10345] RBP: 00007f872d611e41 R08: 0000000000000000 R09: 0000000000000000
[  164.445704][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.445711][T10345] R13: 00007f872d7d6038 R14: 00007f872d7d5fa0 R15: 00007ffc4762a998
[  164.445726][T10345]  </TASK>
[  164.445731][T10345] 
[  164.567986][T10345] Allocated by task 7024:
[  164.569714][T10345]  kasan_save_track+0x3e/0x80
[  164.571368][T10345]  __kasan_slab_alloc+0x6c/0x80
[  164.573235][T10345]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  164.575448][T10345]  xfrm_state_alloc+0x24/0x2f0
[  164.577361][T10345]  __find_acq_core+0x8a7/0x1c00
[  164.579286][T10345]  xfrm_find_acq+0x78/0xa0
[  164.581088][T10345]  xfrm_alloc_userspi+0x6b3/0xc90
[  164.583065][T10345]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.585025][T10345]  netlink_rcv_skb+0x208/0x470
[  164.586937][T10345]  xfrm_netlink_rcv+0x79/0x90
[  164.588809][T10345]  netlink_unicast+0x82f/0x9e0
[  164.590718][T10345]  netlink_sendmsg+0x805/0xb30
[  164.592648][T10345]  __sock_sendmsg+0x21c/0x270
[  164.594487][T10345]  ____sys_sendmsg+0x505/0x830
[  164.596365][T10345]  ___sys_sendmsg+0x21f/0x2a0
[  164.598151][T10345]  __x64_sys_sendmsg+0x19b/0x260
[  164.600070][T10345]  do_syscall_64+0xfa/0x3b0
[  164.601829][T10345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.604105][T10345] 
[  164.605044][T10345] Freed by task 3142:
[  164.606578][T10345]  kasan_save_track+0x3e/0x80
[  164.608329][T10345]  kasan_save_free_info+0x46/0x50
[  164.610238][T10345]  __kasan_slab_free+0x5b/0x80
[  164.612152][T10345]  kmem_cache_free+0x18f/0x400
[  164.614082][T10345]  xfrm_state_gc_task+0x52d/0x6b0
[  164.616110][T10345]  process_scheduled_works+0xae1/0x17b0
[  164.618202][T10345]  worker_thread+0x8a0/0xda0
[  164.619939][T10345]  kthread+0x711/0x8a0
[  164.621483][T10345]  ret_from_fork+0x439/0x7d0
[  164.623223][T10345]  ret_from_fork_asm+0x1a/0x30
[  164.625030][T10345] 
[  164.625943][T10345] The buggy address belongs to the object at ffff888113208000
[  164.625943][T10345]  which belongs to the cache xfrm_state of size 928
[  164.631210][T10345] The buggy address is located 816 bytes inside of
[  164.631210][T10345]  freed 928-byte region [ffff888113208000, ffff8881132083a0)
[  164.636296][T10345] 
[  164.637227][T10345] The buggy address belongs to the physical page:
[  164.639679][T10345] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113208000 pfn:0x113208
[  164.643649][T10345] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  164.647012][T10345] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  164.650044][T10345] page_type: f5(slab)
[  164.651670][T10345] raw: 057ff00000000040 ffff88801af78640 dead000000000122 0000000000000000
[  164.654750][T10345] raw: ffff888113208000 00000000800e000d 00000000f5000000 0000000000000000
[  164.658083][T10345] head: 057ff00000000040 ffff88801af78640 dead000000000122 0000000000000000
[  164.661531][T10345] head: ffff888113208000 00000000800e000d 00000000f5000000 0000000000000000
[  164.664926][T10345] head: 057ff00000000002 ffffea00044c8201 00000000ffffffff 00000000ffffffff
[  164.668364][T10345] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  164.671348][T10345] page dumped because: kasan: bad access detected
[  164.673350][T10345] page_owner tracks the page as allocated
[  164.675310][T10345] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7024, tgid 7023 (syz.0.312), ts 79213411900, free_ts 79084742466
[  164.682653][T10345]  post_alloc_hook+0x240/0x2a0
[  164.684570][T10345]  get_page_from_freelist+0x21e4/0x22c0
[  164.686715][T10345]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.688909][T10345]  alloc_pages_mpol+0x232/0x4a0
[  164.690879][T10345]  allocate_slab+0x8a/0x370
[  164.692660][T10345]  ___slab_alloc+0xbeb/0x1420
[  164.694520][T10345]  kmem_cache_alloc_noprof+0x283/0x3c0
[  164.696675][T10345]  xfrm_state_alloc+0x24/0x2f0
[  164.698546][T10345]  __find_acq_core+0x8a7/0x1c00
[  164.700469][T10345]  xfrm_find_acq+0x78/0xa0
[  164.702255][T10345]  xfrm_alloc_userspi+0x6b3/0xc90
[  164.704250][T10345]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.706228][T10345]  netlink_rcv_skb+0x208/0x470
[  164.708110][T10345]  xfrm_netlink_rcv+0x79/0x90
[  164.710017][T10345]  netlink_unicast+0x82f/0x9e0
[  164.711892][T10345]  netlink_sendmsg+0x805/0xb30
[  164.713729][T10345] page last free pid 7011 tgid 7010 stack trace:
[  164.716128][T10345]  __free_frozen_pages+0xbc4/0xd30
[  164.718058][T10345]  stack_depot_save_flags+0x436/0x860
[  164.720094][T10345]  kasan_save_track+0x4f/0x80
[  164.721890][T10345]  __kasan_kmalloc+0x93/0xb0
[  164.723713][T10345]  __kmalloc_cache_noprof+0x230/0x3d0
[  164.725828][T10345]  mpls_dev_notify+0x121/0x7a0
[  164.727731][T10345]  notifier_call_chain+0x1b6/0x3e0
[  164.729729][T10345]  register_netdevice+0x1608/0x1ae0
[  164.731709][T10345]  ip6_tnl_create2+0x78/0x150
[  164.733603][T10345]  ip6_tnl_newlink+0x311/0x620
[  164.735514][T10345]  rtnl_newlink_create+0x310/0xb00
[  164.737534][T10345]  rtnl_newlink+0x16d6/0x1c70
[  164.739402][T10345]  rtnetlink_rcv_msg+0x7cf/0xb70
[  164.741356][T10345]  netlink_rcv_skb+0x208/0x470
[  164.743234][T10345]  netlink_unicast+0x82f/0x9e0
[  164.745138][T10345]  netlink_sendmsg+0x805/0xb30
[  164.747057][T10345] 
[  164.748024][T10345] Memory state around the buggy address:
[  164.750190][T10345]  ffff888113208200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.753349][T10345]  ffff888113208280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.756477][T10345] >ffff888113208300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.759603][T10345]                                      ^
[  164.761832][T10345]  ffff888113208380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  164.764964][T10345]  ffff888113208400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.768103][T10345] ==================================================================
[  164.771489][T10345] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.774353][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.0.1181 Not tainted syzkaller #0 PREEMPT(full) 
[  164.777993][T10345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.781960][T10345] Call Trace:
[  164.783291][T10345]  <TASK>
[  164.784460][T10345]  dump_stack_lvl+0x99/0x250
[  164.786302][T10345]  ? __asan_memcpy+0x40/0x70
[  164.788169][T10345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.790005][T10345]  ? __pfx__printk+0x10/0x10
[  164.791479][T10345]  vpanic+0x281/0x750
[  164.792741][T10345]  ? __pfx_vpanic+0x10/0x10
[  164.794162][T10345]  ? irqentry_exit+0x74/0x90
[  164.795676][T10345]  panic+0xb9/0xc0
[  164.797128][T10345]  ? __pfx_panic+0x10/0x10
[  164.798896][T10345]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  164.801219][T10345]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.803544][T10345]  ? __xfrm_state_insert+0x8af/0x1450
[  164.805697][T10345]  check_panic_on_warn+0x89/0xb0
[  164.807688][T10345]  ? __xfrm_state_insert+0x8af/0x1450
[  164.809844][T10345]  end_report+0x78/0x160
[  164.811573][T10345]  kasan_report+0x129/0x150
[  164.813414][T10345]  ? __xfrm_state_insert+0x8af/0x1450
[  164.815576][T10345]  __xfrm_state_insert+0x8af/0x1450
[  164.817677][T10345]  ? xfrm_state_insert+0x44/0x60
[  164.819664][T10345]  xfrm_state_insert+0x54/0x60
[  164.821602][T10345]  ipcomp6_init_state+0x655/0x900
[  164.823605][T10345]  __xfrm_init_state+0xa76/0x13f0
[  164.825628][T10345]  ? __xfrm_init_state+0x7ef/0x13f0
[  164.827719][T10345]  xfrm_init_state+0x18/0xa0
[  164.829600][T10345]  pfkey_add+0x1d38/0x2e00
[  164.831400][T10345]  ? __pfx_pfkey_add+0x10/0x10
[  164.833292][T10345]  ? kmem_cache_free+0x18f/0x400
[  164.835272][T10345]  pfkey_sendmsg+0xbfe/0x1090
[  164.837158][T10345]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  164.839187][T10345]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.841172][T10345]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.843294][T10345]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  164.845341][T10345]  __sock_sendmsg+0x21c/0x270
[  164.847199][T10345]  ____sys_sendmsg+0x52d/0x830
[  164.849130][T10345]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.851243][T10345]  ? import_iovec+0x74/0xa0
[  164.853073][T10345]  ___sys_sendmsg+0x21f/0x2a0
[  164.854960][T10345]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.856953][T10345]  ? __fget_files+0x2a/0x420
[  164.858772][T10345]  ? __fget_files+0x3a0/0x420
[  164.860675][T10345]  __sys_sendmmsg+0x227/0x430
[  164.862582][T10345]  ? __pfx___sys_sendmmsg+0x10/0x10
[  164.864619][T10345]  ? do_futex+0x333/0x420
[  164.866336][T10345]  ? fdget+0x184/0x1e0
[  164.867932][T10345]  ? rcu_is_watching+0x15/0xb0
[  164.869861][T10345]  __x64_sys_sendmmsg+0xa0/0xc0
[  164.871807][T10345]  do_syscall_64+0xfa/0x3b0
[  164.873626][T10345]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.875691][T10345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.878103][T10345]  ? exc_page_fault+0x9f/0xf0
[  164.880031][T10345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.882408][T10345] RIP: 0033:0x7f872d58ec29
[  164.884211][T10345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.891788][T10345] RSP: 002b:00007f872e47a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  164.895049][T10345] RAX: ffffffffffffffda RBX: 00007f872d7d5fa0 RCX: 00007f872d58ec29
[  164.898174][T10345] RDX: 000000000400008a RSI: 0000200000000180 RDI: 000000000000000b
[  164.901257][T10345] RBP: 00007f872d611e41 R08: 0000000000000000 R09: 0000000000000000
[  164.904286][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.907406][T10345] R13: 00007f872d7d6038 R14: 00007f872d7d5fa0 R15: 00007ffc4762a998
[  164.910518][T10345]  </TASK>
[  164.912480][T10345] Kernel Offset: disabled
[  164.914118][T10345] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:34:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000328ecb0
R8 =ffff88801f120237 R9 =1ffff11003e24046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028f6 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f872e47a6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002000 CR3=0000000026754000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f872d7a7498 00007f872d7a7470 XMM03=00007f872d7a74a8 00007f872d7a74a0
XMM04=00007f872e30d100 00007f872d7a7460 XMM05=00007f872d7a7478 00007f872d7a74c0
XMM06=00007f872d7a74b8 00007f872d7a74b0 XMM07=00007f872d7a74a8 00007f872d7a74a0
XMM08=0000000000000000 00007f872d612f0f XMM09=0000000000000000 00007f872d612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000001d8f RBX=ffff888026dc5cc0 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffc90003aef7b0 RBP=000000000021a300 RSP=ffffc90003aef730
R8 =ffffc90003aef7af R9 =0000000000000000 R10=ffffc90003aef788 R11=fffff5200075def6
R12=ffff888026dc5000 R13=ffff888026dc5d90 R14=0000000000000000 R15=ffffffff821055db
RIP=ffffffff84d0c923 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569862500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f037e9056c0 CR3=0000000027320000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
