last executing test programs:

699.213018ms ago: executing program 2 (id=833):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x1, 0xf0bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x20044884)
close(0x3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x2}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000040)={0x7, 'wlan1\x00', {0x6}, 0x2})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="a9afa60e3147d0e387ce9dce8c2773c4e2c3d06dd829ebafd522b874affe7f4a16fea6a70c8a6f1564d316e37f565371244b241abde795c16ca3560e08877bc1537d4dd9", 0x44)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r11, &(0x7f0000000040)={0x1d, r10}, 0x10)
socket$netlink(0x10, 0x3, 0x0)

514.870072ms ago: executing program 2 (id=836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r3, 0x100000000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0x40}, @in={0x2, 0x4e20, @local}], 0x68)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0)
read(r4, &(0x7f0000000240)=""/214, 0xd6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000000000000a400020073797a3100000000050001002fa7a2a91c0107800c0001800831b340ffffffff0c000280080001407f00000100"/68], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000098601020000000000000000000000000900020073797a1500e6000500010007000bc869e0ed6b7531993cbece9580319100100007790c000180080001407f000001571785d6cdcebf6c2a78d16a37bc6dc80e903b11d5", @ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x30048047}, 0x4040010)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x2000, 0x0, 0x101, 0x0, 0x1, 0x10}, 0x9c)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff2e, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000009500c2000000000095000012000000006cb3e3ce7cdc8223dbdbc1589d23babd89b3facd83d931b50e339735f754cdbad4cec10071a1a73bd94c6b9813406d5364bb6def3567dabddade6947ba9e46d8005e050139957b66878dc7ae93469a18e27a9da76918edcb03b40c2ff38636a2e6bc03493c87bf4ab24906753746635a6a3b6be6bceb267dad45f50561b0bac14d038d9673df8f88e4c7169f40afaca6221fa41cb10b2dccd458450010e227863c3f31d088a6d6b77891011a2c8b3b24558faa"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r9, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0)

513.903249ms ago: executing program 0 (id=837):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c00040010000108fdeffffdfddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000074001a80280002802400018008001c00a13e2c1a08001d000500000008001c000800000008001f000600000048000a8014000700ff020000000000000000000000000001040008000b00000014000700fe8000000000000000000000000000aa14000700ff020000000000000000000000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500000000000000040003000200000005000300800000000800020002"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)

425.165441ms ago: executing program 0 (id=840):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = socket(0x22, 0x2, 0x3) (async)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1}}], 0x2, 0x24040800) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4, 0xf}, 0x8) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x32}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
pipe(&(0x7f0000000700)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={<r7=>0x0}, &(0x7f0000000780)=0xc) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000007c0)=<r8=>0x0)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x11c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000095)
ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f00000000c0)=0x48) (async)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f00000001c0), &(0x7f0000000180)=0x4) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0000001000010800"/20, @ANYRES32=r11, @ANYBLOB="31200000000000005400198014000400ecf822bc3cbd24b6"], 0x7c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269"], 0xd0060) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async)
r13 = socket(0x10, 0x3, 0x0) (async)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
pread64(r14, 0x0, 0x0, 0x2) (async)
sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0x0)

420.861391ms ago: executing program 0 (id=841):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async)
readv(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a3200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x82000, {0x0, 0x0, 0x0, r9, {}, {0x5, 0xb}, {0xd, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x40000003, 0x3, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

327.423577ms ago: executing program 2 (id=843):
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2002, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000040)={0x8, 'batadv_slave_0\x00', {'nicvf0\x00'}, 0x3})
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_delroute={0x0, 0x19, 0x8, 0x70bd26, 0x25dfdbfd, {0xa, 0x20, 0x14, 0x2, 0xff, 0x0, 0xfe, 0x6}, [@RTA_IIF={0x0, 0x3, r5}, @RTA_MARK={0x0, 0x10, 0xb}, @RTA_IIF={0x0, 0x3, r5}, @RTA_GATEWAY={0x0, 0x5, @rand_addr=' \x01\x00'}, @RTA_MARK={0x0, 0x10, 0xfffffffe}, @RTA_EXPIRES={0x0, 0x17, 0x8}]}, 0x44}}, 0x0)

324.105174ms ago: executing program 1 (id=844):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8)
socket$igmp(0x2, 0x3, 0x2) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000002cc0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x5}}], 0x1, 0x0) (async)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000002cc0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x5}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

231.219605ms ago: executing program 2 (id=845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
unshare(0x22020600)
tee(r4, r3, 0x80000001, 0x0)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000001010500000000000000000005000001280002800c0002809608e47e01a8cd48aea927ea05000100010000000c00028005000100010000000c000280050001"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}, {0xa, 0x4e21, 0x401, @remote, 0x5}, 0x0, {[0x2, 0x6, 0x5, 0x2, 0x9, 0x3, 0xfffffffc, 0x401]}}, 0x5c)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000100)=ANY=[], 0x290)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'ip6gretap0\x00'}]}}]}, 0x90}}, 0x24000094)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000200)=0x6, 0x4)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)

230.817735ms ago: executing program 1 (id=846):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)

207.938448ms ago: executing program 0 (id=847):
r0 = epoll_create1(0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x60000800) (async)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x18, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
unshare(0x2c020400)
clock_gettime(0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f00000000c0)={'ip6_vti0\x00', 0xa9de}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

206.710281ms ago: executing program 1 (id=848):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x98, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x0, 0x8, 0x2c8ee843}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x7, 0x9fb, 0xffffffff, 0x1, 0x5, 0x1, 0x8}}, {0x14, 0x2, [0x5, 0x8, 0xfffa, 0x1, 0x5, 0x3, 0x9, 0x6000]}}]}]}, 0x98}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x17, 0x4)

151.218814ms ago: executing program 1 (id=849):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e0000040f80ec59acbc0413a1f8480b4a00005e140602", 0x17}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b27, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x3c, 0x68, 0x1, 0x100003, 0x7ffffff9, {}, [@NHA_GROUP={0x24, 0x2, [{0x2, 0x3}, {0x0, 0x81}, {0x1, 0xc}, {0x0, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x3})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0xffe0}, {0x0, 0xc597f37949029df5}, {0x2, 0xa}}}, 0x24}}, 0x40004)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x29, 0x1, 0x2, 0x9, 0x56, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x10, 0x0, 0x30}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000080)

81.351008ms ago: executing program 2 (id=850):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x9) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
close(0xffffffffffffffff) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r2, 0x0, 0x0) (async)
connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0x48000)
listen(r3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000af00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="4588b3971f2846938cebbd031f4d", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x1, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0x8, [@null, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r6], 0x158}, 0x1, 0xba01}, 0x44)

80.772325ms ago: executing program 1 (id=851):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3a0, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x374, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "116dc9611895234599d9b7808ac770cd4f3c763befa2cb1da8934ae025bf8290ffe4d087f911eed1f18ee63392442208044261045530611e38cfc83a413a1ef1fc49563dba72dbec1f5a63f2077fa849e571157b09b1f89848f1d406068970cb245c47f46e9a77b9d5bd3aa75390d5ff281a1ecc0aeb7ec6437106f4675c99d313804b769e0a8cefaff00cd3d554f66830f33723abe6e0b97842e4402c"}, @NFTA_SET_ELEM_USERDATA={0x1c, 0x6, 0x1, 0x0, "260ed8ddf7438b9f5d85e3048a71c18c56d228f300000000"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "04a361a29fa4a177092873e599095b5a04c0c373626825c69b039f2d5121d73b767c533cbcc0eb7d2d72ca3accdc9134843d9cbe96a2dcedce7b58652e233a11a2e4241b04f9437fec0a06dc34d71eeca97b5b44b2b7c2b56005ceb549ac513873"}, @NFTA_SET_ELEM_DATA={0x1f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "722b2fe68f00a7e3851cc8ad8b35abc2818111201fff9e9392d57ed7962d55724b643b8e389b316306dd561520a7a3d221b10268c6f7af11742fa98c04d3b64f0424bc2e0733008f3b2954b45df3abf29e9b478e928526ec98339aca7f60406b8f7396b720cc527cd8c2305edd121f7a8e4f44aa3ec75d5f24d941745df6ccbb56ee13d92a56a22bad2d2d2bf5b29941cf7ad20a884001be6f9211feff91af6118201dd19212fabe69939685fa07eabdad9af7eedfe1a1ceb0bdb16b4ab0"}, @NFTA_DATA_VALUE={0xa9, 0x1, "a836630dc39a2d0380ad357b5977907e1cac1e65c07c440259617a9842bac01c62261a37e68d618dd62e01cca6b4e10562097eddf0306070f203be1c32be07910710bf755cb7a717b3f91de0785d2718ec52f5aec25f921dbef9fe0cdb16a456b9f9b71f1e59464c27d3a39161ee305936cce51189c65fe61505782bcb339fd35a54dde3a4b951b1914734bba43586db67d7fc3ad0754845b0a64ae8ac117733adede919f4"}, @NFTA_DATA_VALUE={0x7a, 0x1, "bb74416c2e0012a058836233fb823a5a13e929c6fd80fb0204b3b5ae409c771599c6416cd91d9b5c979309c7003f76fd10e0da06c1b9794cd494c3887a2ef2c9d20dfe00d749d5f73aeb7fdef8363c0f8fe3b2105802edba7ec5f34950c8d093e672361746fb7a5e56a4ae4bd0ffa411b8a4156bb267"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x424}}, 0x40000)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x1, 0x8)
socketpair(0x22, 0x0, 0x2, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}}, 0x0)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44095)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000440), &(0x7f00000004c0)=r9}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r11=>0x0})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$sock_int(r12, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
r13 = socket(0x10, 0x3, 0x6)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4001)
r14 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000600)={'team0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}}]}, 0x88}}, 0x20000000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r11, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r4, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NAN_FUNC={0xa8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_SERVICE_INFO={0x94, 0xb, "5283505cb53d19d5315cd8cd6566d612aa5eee172f22a6d211f6aafd489a80e2e769382a4d83ce36bc949af70f078ba615b9fd97b0654cf45d4faa219d7b23e6fc9df7c3594c0e2427f580fa6085ea30d4c8cf2667bef2bb7fe8ed79c551f6f97b50459bfe93130d35a26d2c4113cfe75342f7ff312938a0752f5fc90347855f70311c4ce033dc731dc9af7456b80ea9"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000085}, 0x44040)

80.098056ms ago: executing program 0 (id=852):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0) (async)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xe, '\x00', r1, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r9, 0x2}, 0x20)
r10 = accept4(r5, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80800) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYBLOB="000004000a0002"], 0x28}}, 0x0) (async)
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r6) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000600)) (async)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0) (async)
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) (async)
sendmsg$nl_route(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001c000100000000800000000007000000", @ANYRES32=r16, @ANYBLOB="8000b20004000e800700000000000000aa2200000600050004000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="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"], 0x44}}, 0x4848) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x25, 0x0, r15}, 0x20)

10.162915ms ago: executing program 0 (id=853):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x4, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYBLOB="92e9b0c0cb051eb6d28e44a87ece8e436bc75802364e049bddfa0d578ea8522d5e54a5b0de15e9823bf8329542a79fac8f9c1cc7b5e20c51f62fc210f76f85c62e650707ee4bb23af4a97d6156e83a780325609c754e4070df5e1c206f2e37294cc04ca79b62da5718b81ea77cd79b264e863a383ac26a90ed3a5515cca3649b2483155734ddcaff9b0a3416857506a82d3dacd1cdbae29c9c34ef0ab9af4176d3a00fdb9048cb3516f8200cfbe25ec1380b05cfff2c23a0cfa88e99b865aa3b59ce786a984509fb9379256b1338cf898028dcd002"], 0xf8}, 0x1, 0x0, 0x0, 0x40857}, 0x20040000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000000000000000000000fde1860090780000000000000800000000000000ee3f000000002b036f07006e64021d683910c3090bf9ffffffffffff4457ffa273c1b80029442911892704"], 0xfdef)

8.271328ms ago: executing program 2 (id=854):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@allocspi={0x108, 0x16, 0x1, 0x70bd28, 0x25dfdbfd, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10004d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x2, 0x7, 0x1000, 0x1, 0x0, 0xfffc}, {0x1, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@tfcpad={0x8, 0x16, 0x5}, @tfcpad={0x8, 0x16, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000006c0)="5ba58a09", 0x4}, {0x0}], 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'team0\x00', 0x10})
sendmsg$NFC_CMD_START_POLL(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x82}}, 0x14}, 0x1, 0x0, 0x0, 0x8047}, 0x44012)

0s ago: executing program 1 (id=855):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000))
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x3)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21383' (ED25519) to the list of known hosts.
syzkaller login: [   49.018786][ T5769] cgroup: Unknown subsys name 'net'
[   49.177035][ T5769] cgroup: Unknown subsys name 'cpuset'
[   49.182891][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.550087][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.012658][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.021448][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.024179][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.028395][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.031453][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.034281][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.035566][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.037948][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.040986][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.042931][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.045173][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.050048][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.050712][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.056022][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.066777][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.356799][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.391946][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   56.424193][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   56.571239][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.574392][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.577557][ T5845] bridge_slave_0: entered allmulticast mode
[   56.580312][ T5845] bridge_slave_0: entered promiscuous mode
[   56.584597][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.587117][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.589355][ T5837] bridge_slave_0: entered allmulticast mode
[   56.592169][ T5837] bridge_slave_0: entered promiscuous mode
[   56.595743][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.598673][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.600928][ T5837] bridge_slave_1: entered allmulticast mode
[   56.603632][ T5837] bridge_slave_1: entered promiscuous mode
[   56.614853][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.618196][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.620883][ T5839] bridge_slave_0: entered allmulticast mode
[   56.623690][ T5839] bridge_slave_0: entered promiscuous mode
[   56.626980][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.629394][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.631865][ T5845] bridge_slave_1: entered allmulticast mode
[   56.635115][ T5845] bridge_slave_1: entered promiscuous mode
[   56.659433][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.662035][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.664476][ T5839] bridge_slave_1: entered allmulticast mode
[   56.668064][ T5839] bridge_slave_1: entered promiscuous mode
[   56.696111][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.709080][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.723397][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.727813][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.732240][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.753154][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.782097][ T5837] team0: Port device team_slave_0 added
[   56.785351][ T5839] team0: Port device team_slave_0 added
[   56.799016][ T5845] team0: Port device team_slave_0 added
[   56.802223][ T5837] team0: Port device team_slave_1 added
[   56.814750][ T5839] team0: Port device team_slave_1 added
[   56.818114][ T5845] team0: Port device team_slave_1 added
[   56.839268][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.841507][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.850368][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.880323][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.882778][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.891947][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.895976][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.898303][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.908459][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.913722][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.916459][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.926008][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.931426][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.934024][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.944002][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.950977][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.953715][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.963642][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.056968][ T5845] hsr_slave_0: entered promiscuous mode
[   57.060087][ T5845] hsr_slave_1: entered promiscuous mode
[   57.070182][ T5837] hsr_slave_0: entered promiscuous mode
[   57.072833][ T5837] hsr_slave_1: entered promiscuous mode
[   57.075143][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   57.077626][ T5837] Cannot create hsr debugfs directory
[   57.091789][ T5839] hsr_slave_0: entered promiscuous mode
[   57.094422][ T5839] hsr_slave_1: entered promiscuous mode
[   57.097646][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   57.099480][ T5839] Cannot create hsr debugfs directory
[   57.409811][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.435735][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.449254][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.455353][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.511220][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.530731][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.548343][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.569978][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.622744][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.649989][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.668822][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.679098][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.768839][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.799066][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.805946][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.816667][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.819133][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.832775][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.835669][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.851164][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.891106][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.894406][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.919596][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.922476][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.931179][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.995642][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   58.010400][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.013201][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.029706][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.032518][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.073513][ T5840] Bluetooth: hci2: command tx timeout
[   58.147367][ T5840] Bluetooth: hci1: command tx timeout
[   58.149768][ T5840] Bluetooth: hci0: command tx timeout
[   58.192234][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.274298][ T5845] veth0_vlan: entered promiscuous mode
[   58.295145][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.320611][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.323718][ T5845] veth1_vlan: entered promiscuous mode
[   58.359763][ T5839] veth0_vlan: entered promiscuous mode
[   58.375925][ T5839] veth1_vlan: entered promiscuous mode
[   58.385397][ T5845] veth0_macvtap: entered promiscuous mode
[   58.402469][ T5845] veth1_macvtap: entered promiscuous mode
[   58.421786][ T5837] veth0_vlan: entered promiscuous mode
[   58.430675][ T5839] veth0_macvtap: entered promiscuous mode
[   58.437738][ T5839] veth1_macvtap: entered promiscuous mode
[   58.442188][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.451685][ T5837] veth1_vlan: entered promiscuous mode
[   58.461445][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.464613][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.479902][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.482275][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.484992][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.497780][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.508767][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.521433][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.533034][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.538761][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.557761][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.581227][ T5837] veth0_macvtap: entered promiscuous mode
[   58.604911][ T5837] veth1_macvtap: entered promiscuous mode
[   58.627615][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.630674][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.648740][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.650198][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.662364][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.668846][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.696333][ T5891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.710652][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.719707][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.727605][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.741288][ T5891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.758259][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.758413][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.765827][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.809561][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.848407][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.861915][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.900606][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.903296][ T5909] tipc: Started in network mode
[   58.904754][ T5909] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   58.908220][ T5909] tipc: Enabled bearer <eth:vlan0>, priority 18
[   58.911297][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.913660][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.919664][ T5909] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[   58.922445][ T5909] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[   59.009108][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.266769][ T5921] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   59.270069][ T5921] nbd: error processing sock list
[   59.272263][ T5921] block nbd0: shutting down sockets
[   59.382111][ T5930] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   59.389068][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.581419][ T5940] netlink: 'syz.2.12': attribute type 1 has an invalid length.
[   59.584011][ T5940] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.672031][ T5941] netlink: 240 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.837937][ T5952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.844702][ T5952] netlink: 'syz.0.19': attribute type 6 has an invalid length.
[   59.864582][ T5950] tipc: Disabling bearer <eth:syzkaller0>
[   59.970192][   T24] IPVS: starting estimator thread 0...
[   59.975547][ T5960] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   60.025519][ T5957] ieee802154 phy0 wpan0: encryption failed: -22
[   60.089065][ T5965] IPVS: using max 64 ests per chain, 153600 per kthread
[   60.138153][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.141365][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.158939][ T5840] Bluetooth: hci2: command tx timeout
[   60.227671][ T5840] Bluetooth: hci0: command tx timeout
[   60.229877][ T5840] Bluetooth: hci1: command tx timeout
[   60.276318][ T5988] pim6reg1: entered promiscuous mode
[   60.278859][ T5988] pim6reg1: entered allmulticast mode
[   60.311537][ T5989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.29'.
[   60.379540][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.390528][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.394068][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.399877][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.404071][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.407777][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.410579][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.413596][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.419890][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.423123][ T5993] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.512827][ T6000] C: renamed from lo (while UP)
[   60.520459][ T6000] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   60.674100][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[   60.692122][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   60.695280][ T6008] team0: Device ipvlan2 is already an upper device of the team interface
[   60.865586][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37'.
[   60.872451][   T24] tipc: Node number set to 10005162
[   60.876832][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.878220][ T6023] Bluetooth: MGMT ver 1.23
[   60.884922][ T6023] netlink: 'syz.2.39': attribute type 4 has an invalid length.
[   60.993902][ T6031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.998819][ T6031] syzkaller0: entered promiscuous mode
[   61.000919][ T6031] syzkaller0: entered allmulticast mode
[   61.021936][ T6031] tipc: Resetting bearer <eth:syzkaller0>
[   61.029295][ T6029] tipc: Resetting bearer <eth:syzkaller0>
[   61.051597][ T6029] tipc: Disabling bearer <eth:syzkaller0>
[   61.107331][  T793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.336029][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'.
[   61.830358][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.907286][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.925332][ T6060] pimreg: tun_chr_ioctl cmd 1074025677
[   61.927569][ T6060] pimreg: linktype set to 780
[   61.930216][ T6060] pimreg: tun_chr_ioctl cmd 35111
[   62.237400][   T54] Bluetooth: hci2: command tx timeout
[   62.306708][   T54] Bluetooth: hci1: command tx timeout
[   62.309404][ T5840] Bluetooth: hci0: command tx timeout
[   62.355832][ T6070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.54'.
[   62.533389][ T6074] netlink: 'syz.0.56': attribute type 2 has an invalid length.
[   62.535939][ T6074] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.56'.
[   62.710498][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.721910][ T6077] erspan0: entered promiscuous mode
[   62.725035][ T6077] erspan0: left promiscuous mode
[   62.814342][ T6080] netlink: 'syz.0.58': attribute type 29 has an invalid length.
[   62.818070][ T6080] netlink: 'syz.0.58': attribute type 29 has an invalid length.
[   62.870064][ T6084] bond1: entered promiscuous mode
[   62.871932][ T6084] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.946984][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.949771][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.104489][ T6099] syzkaller1: entered promiscuous mode
[   63.109990][ T6099] syzkaller1: entered allmulticast mode
[   63.236813][ T6114] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   63.251158][ T6114] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.266161][ T6114] tipc: Started in network mode
[   63.272222][ T6114] tipc: Node identity ba5af67f1b65, cluster identity 4711
[   63.275684][ T6114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.288683][ T6114] syzkaller0: entered promiscuous mode
[   63.298417][ T6114] syzkaller0: entered allmulticast mode
[   63.311593][ T6096] Zero length message leads to an empty skb
[   63.326119][ T6121] tipc: Resetting bearer <eth:vlan0>
[   63.333870][ T6121] vlan0: entered promiscuous mode
[   63.361736][ T6113] tipc: Resetting bearer <eth:syzkaller0>
[   63.373619][ T6113] tipc: Disabling bearer <eth:syzkaller0>
[   63.466097][ T6128] netlink: 'syz.0.70': attribute type 1 has an invalid length.
[   63.729492][ T6146] tipc: Started in network mode
[   63.731501][ T6146] tipc: Node identity aa961044fd86, cluster identity 4711
[   63.734973][ T6146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.743668][ T6146] syzkaller0: entered promiscuous mode
[   63.745897][ T6146] syzkaller0: entered allmulticast mode
[   63.768876][ T6145] tipc: Resetting bearer <eth:syzkaller0>
[   63.791075][ T6145] tipc: Disabling bearer <eth:syzkaller0>
[   63.905701][ T6166] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.074664][ T6182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.080629][ T6182] syzkaller0: entered promiscuous mode
[   64.082311][ T6182] syzkaller0: entered allmulticast mode
[   64.120946][ T6181] tipc: Resetting bearer <eth:syzkaller0>
[   64.131343][ T6181] tipc: Disabling bearer <eth:syzkaller0>
[   64.219926][ T6191] __nla_validate_parse: 9 callbacks suppressed
[   64.219937][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'.
[   64.233793][ T6194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.316948][ T5840] Bluetooth: hci2: command tx timeout
[   64.407631][ T5840] Bluetooth: hci0: command tx timeout
[   64.409510][ T5840] Bluetooth: hci1: command tx timeout
[   64.413561][ T6211] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   64.415965][ T6211] netlink: 244 bytes leftover after parsing attributes in process `syz.0.95'.
[   64.435330][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   64.857892][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'.
[   64.891854][ T6237] hsr_slave_1 (unregistering): left promiscuous mode
[   64.914725][ T6236] pim6reg: entered allmulticast mode
[   65.038719][ T6242] syzkaller0: entered promiscuous mode
[   65.040882][ T6242] syzkaller0: entered allmulticast mode
[   65.045604][ T6242] sctp: [Deprecated]: syz.0.104 (pid 6242) Use of int in max_burst socket option deprecated.
[   65.045604][ T6242] Use struct sctp_assoc_value instead
[   65.256035][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.105'.
[   65.437295][ T6252] netlink: 104 bytes leftover after parsing attributes in process `syz.1.105'.
[   65.753950][ T6247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.757372][ T6248] syzkaller0: entered promiscuous mode
[   65.761034][ T6248] syzkaller0: entered allmulticast mode
[   65.766995][ T6253] tipc: Resetting bearer <eth:syzkaller0>
[   65.778857][ T6243] tipc: Resetting bearer <eth:syzkaller0>
[   65.811932][ T6243] tipc: Disabling bearer <eth:syzkaller0>
[   65.867926][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'.
[   65.930084][ T5891] nci: nci_rx_work: unknown MT 0x1
[   65.959864][ T6260] netlink: 'syz.2.107': attribute type 13 has an invalid length.
[   65.962730][ T6260] netlink: 'syz.2.107': attribute type 17 has an invalid length.
[   66.015495][ T6260] net_ratelimit: 10 callbacks suppressed
[   66.015512][ T6260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.077094][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.148148][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.814021][   T33] audit: type=1800 audit(1757622998.372:2): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="blkio.bfq.time_recursive" dev="tmpfs" ino=212 res=0 errno=0
[   66.889484][ T6310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.892727][ T6310] syzkaller0: entered promiscuous mode
[   66.895474][ T6310] syzkaller0: entered allmulticast mode
[   66.909329][ T6310] syzkaller0: mtu greater than device maximum
[   66.913473][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[   66.920676][ T6312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.122'.
[   66.929820][ T6309] tipc: Disabling bearer <eth:syzkaller0>
[   66.934756][ T6312] netlink: 176 bytes leftover after parsing attributes in process `syz.1.122'.
[   66.938144][ T6312] ip6gretap0: entered promiscuous mode
[   66.940362][ T6312] netlink: 176 bytes leftover after parsing attributes in process `syz.1.122'.
[   67.107063][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.217936][ T6336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.221278][ T6336] syzkaller0: entered promiscuous mode
[   67.223668][ T6336] syzkaller0: entered allmulticast mode
[   67.248459][ T6336] syzkaller0: mtu greater than device maximum
[   67.253470][ T6334] tipc: Resetting bearer <eth:syzkaller0>
[   67.280175][ T6334] tipc: Disabling bearer <eth:syzkaller0>
[   67.305014][ T6343] syz.0.133 (6343) used greatest stack depth: 19032 bytes left
[   67.310143][ T6345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.312557][ T6345] IPv6: NLM_F_CREATE should be set when creating new route
[   67.315505][ T6345] lo: entered allmulticast mode
[   67.329958][ T6345] tunl0: entered allmulticast mode
[   67.332585][ T6345] gre0: entered allmulticast mode
[   67.353328][ T6345] gretap0: entered allmulticast mode
[   67.359518][ T6345] erspan0: entered allmulticast mode
[   67.363788][ T6345] ip_vti0: entered allmulticast mode
[   67.367097][ T6345] ip6_vti0: entered allmulticast mode
[   67.370345][ T6345] sit0: entered allmulticast mode
[   67.374763][ T6345] ip6tnl0: entered allmulticast mode
[   67.379920][ T6345] ip6gre0: entered allmulticast mode
[   67.383047][ T6345] syz_tun: entered allmulticast mode
[   67.383723][ T6349] netlink: 'syz.1.136': attribute type 10 has an invalid length.
[   67.389426][ T6345] ip6gretap0: entered allmulticast mode
[   67.394745][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.397723][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.403562][ T6345] bridge0: entered allmulticast mode
[   67.411593][ T6345] vcan0: entered allmulticast mode
[   67.415777][ T6345] bond0: entered allmulticast mode
[   67.419762][ T6345] bond_slave_0: entered allmulticast mode
[   67.421952][ T6345] bond_slave_1: entered allmulticast mode
[   67.427410][ T6345] team0: entered allmulticast mode
[   67.429633][ T6345] team_slave_0: entered allmulticast mode
[   67.431872][ T6345] team_slave_1: entered allmulticast mode
[   67.438322][ T6345] dummy0: entered allmulticast mode
[   67.444868][ T6345] nlmon0: entered allmulticast mode
[   67.448750][ T6345] caif0: entered allmulticast mode
[   67.451082][ T6345] batadv0: entered allmulticast mode
[   67.455553][ T6345] vxcan0: entered allmulticast mode
[   67.459163][ T6345] vxcan1: entered allmulticast mode
[   67.462202][ T6345] veth0: entered allmulticast mode
[   67.469590][ T6345] veth1: entered allmulticast mode
[   67.479529][ T6345] wg0: entered allmulticast mode
[   67.484442][ T6345] wg1: entered allmulticast mode
[   67.489676][ T6345] wg2: entered allmulticast mode
[   67.494024][ T6345] veth0_to_bridge: entered allmulticast mode
[   67.503591][ T6345] veth1_to_bridge: entered allmulticast mode
[   67.511607][ T6345] veth0_to_bond: entered allmulticast mode
[   67.517828][ T6345] veth1_to_bond: entered allmulticast mode
[   67.524283][ T6345] veth0_to_team: entered allmulticast mode
[   67.534015][ T6345] veth1_to_team: entered allmulticast mode
[   67.542443][ T6345] veth0_to_batadv: entered allmulticast mode
[   67.547802][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.551283][ T6345] batadv_slave_0: entered allmulticast mode
[   67.558129][ T6345] veth1_to_batadv: entered allmulticast mode
[   67.563287][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.567526][ T6345] batadv_slave_1: entered allmulticast mode
[   67.573825][ T6345] xfrm0: entered allmulticast mode
[   67.580997][ T6357] openvswitch: netlink: Flow key attr not present in new flow.
[   67.581274][ T6345] veth0_to_hsr: entered allmulticast mode
[   67.589809][ T6345] hsr_slave_0: entered allmulticast mode
[   67.594152][ T6345] veth1_to_hsr: entered allmulticast mode
[   67.601025][ T6345] hsr_slave_1: entered allmulticast mode
[   67.606206][ T6345] hsr0: entered allmulticast mode
[   67.611644][ T6345] veth1_virt_wifi: entered allmulticast mode
[   67.619004][ T6345] veth0_virt_wifi: entered allmulticast mode
[   67.623776][ T6345] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   67.627910][ T6345] veth1_vlan: entered allmulticast mode
[   67.632924][ T6345] veth0_vlan: entered allmulticast mode
[   67.645830][ T6345] vlan0: entered allmulticast mode
[   67.648417][ T6345] vlan1: entered allmulticast mode
[   67.651224][ T6345] macvlan0: entered allmulticast mode
[   67.656345][ T6345] macvlan1: entered allmulticast mode
[   67.661355][ T6345] ipvlan0: entered allmulticast mode
[   67.663557][ T6345] ipvlan1: entered allmulticast mode
[   67.666318][ T6345] veth1_macvtap: entered allmulticast mode
[   67.673477][ T6345] veth0_macvtap: entered allmulticast mode
[   67.679377][ T6345] macvtap0: entered allmulticast mode
[   67.685045][ T6345] macsec0: entered allmulticast mode
[   67.690967][ T6345] geneve0: entered allmulticast mode
[   67.696440][ T6345] geneve1: entered allmulticast mode
[   67.703183][ T6345] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   67.709600][ T6345] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[   67.714531][ T6345] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   67.721359][ T6345] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[   67.734183][ T6345] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   67.745271][ T6345] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   67.750780][ T6345] erspan1: entered allmulticast mode
[   67.763280][ T6349] team0: Device ipvlan1 failed to register rx_handler
[   67.770365][ T5891] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.773841][ T5891] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.788454][ T5891] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.798201][ T5891] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.909817][ T6365] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   67.915274][ T6365] ieee802154 phy0 wpan0: encryption failed: -22
[   68.146918][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.575020][ T6401] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   68.579851][   T24] IPVS: starting estimator thread 0...
[   68.583563][ T6401] ieee802154 phy0 wpan0: encryption failed: -22
[   68.641646][ T6406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.672996][ T6404] IPVS: using max 39 ests per chain, 93600 per kthread
[   69.099181][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.103302][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.109110][  T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.110574][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.115258][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.725515][ T6435] __nla_validate_parse: 7 callbacks suppressed
[   69.725530][ T6435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.158'.
[   70.784916][ T6481] netlink: 508 bytes leftover after parsing attributes in process `syz.0.172'.
[   71.032397][    T9] net_ratelimit: 5 callbacks suppressed
[   71.032409][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.033625][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.034679][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.037887][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.266921][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.347580][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   71.490132][ T6520] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   71.553916][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'.
[   71.610522][ T6529] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   71.669940][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.679815][ T6529] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.736183][ T6529] veth3: entered promiscuous mode
[   71.756024][ T6529] bond3: (slave veth3): Enslaving as an active interface with a down link
[   71.786767][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'.
[   71.790326][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'.
[   71.858890][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'.
[   71.864426][ T6541] netlink: 'syz.0.191': attribute type 5 has an invalid length.
[   71.864642][ T6543] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   71.871940][ T6541] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.191'.
[   71.890062][ T6539] syzkaller0: entered promiscuous mode
[   71.892302][ T6539] syzkaller0: entered allmulticast mode
[   71.895223][ T6539] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   71.935450][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   71.941955][ T6550] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.954212][ T6547] macsec1: entered promiscuous mode
[   71.956376][ T6547] macsec1: entered allmulticast mode
[   72.065879][ T6557] netlink: 'syz.0.197': attribute type 1 has an invalid length.
[   72.126212][ T6560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.151388][ T6561] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   72.192513][ T6563] netlink: 'syz.1.199': attribute type 23 has an invalid length.
[   72.307336][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.310880][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.492197][ T6585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.572561][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'.
[   72.676295][ T6599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.684510][ T6599] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   72.695339][ T6599] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   72.717311][ T6599] syzkaller0: mtu greater than device maximum
[   72.780112][ T6605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   73.262892][ T6631] netlink: 'syz.2.226': attribute type 13 has an invalid length.
[   73.317877][ T6640] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   73.427729][ T6654] netlink: 'syz.1.233': attribute type 4 has an invalid length.
[   73.444844][ T6656] netlink: 'syz.2.234': attribute type 5 has an invalid length.
[   73.642216][ T6678] netlink: 'syz.1.241': attribute type 2 has an invalid length.
[   73.645511][ T6678] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   73.654004][ T6678] netlink: 'syz.1.241': attribute type 83 has an invalid length.
[   73.658563][ T6678] ipvlan0: entered promiscuous mode
[   73.787751][    T9] tipc: Node number set to 2705323647
[   74.248503][ T6702] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   74.254542][ T6702] ieee802154 phy0 wpan0: encryption failed: -22
[   74.388411][    C1] Illegal XDP return value 16128 on prog  (id 92) dev lo, expect packet loss!
[   74.648107][ T6736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.651025][ T6736] syzkaller0: entered promiscuous mode
[   74.655241][ T6736] syzkaller0: entered allmulticast mode
[   74.685133][ T6735] tipc: Resetting bearer <eth:syzkaller0>
[   74.699064][ T6735] tipc: Disabling bearer <eth:syzkaller0>
[   75.213630][ T6758] __nla_validate_parse: 16 callbacks suppressed
[   75.213642][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'.
[   75.337117][ T6760] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.269'.
[   75.599379][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.273'.
[   75.642878][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[   75.661265][ T6771] batman_adv: batadv0: Adding interface: ipvlan2
[   75.663944][ T6771] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.682579][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.687865][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.691593][ T6771] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   75.700856][ T6769] netlink: 68 bytes leftover after parsing attributes in process `syz.2.273'.
[   75.753256][ T6779] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[   75.760893][ T6779] bond0: (slave gretap0): Opening slave failed
[   76.547136][ T5869] net_ratelimit: 10 callbacks suppressed
[   76.547148][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.843707][ T6799] dvmrp1: entered allmulticast mode
[   76.850143][ T6799] dvmrp1: left allmulticast mode
[   76.987223][ T6816] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   77.082288][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'.
[   77.143788][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[   77.354033][ T6848] tap0: tun_chr_ioctl cmd 1074025677
[   77.355957][ T6848] tap0: linktype set to 0
[   77.512167][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.541998][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'.
[   77.597071][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.616094][ T6859] bond2: entered promiscuous mode
[   77.619939][ T6859] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.751114][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.829033][ T6867] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.863719][ T6871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.872824][ T6871] netlink: 100 bytes leftover after parsing attributes in process `syz.0.300'.
[   77.879383][ T6873] validate_nla: 7 callbacks suppressed
[   77.879403][ T6873] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[   77.886354][ T6871] ieee802154 phy0 wpan0: encryption failed: -22
[   77.922774][ T6873] bond4 (unregistering): Released all slaves
[   77.972408][ T6878] wg2: entered promiscuous mode
[   77.975161][ T6878] wg2: entered allmulticast mode
[   78.040441][ T6885] tap0: tun_chr_ioctl cmd 1074025677
[   78.042321][ T6885] tap0: linktype set to 769
[   78.115899][ T6894] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[   78.326427][ T6907] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[   78.333722][ T6907] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[   78.404111][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.501790][ T6917] openvswitch: netlink: Flow actions attr not present in new flow.
[   78.508701][ T6917] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   78.627568][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.737305][ T5891] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.740251][ T5891] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.743342][ T5891] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.748758][ T5891] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.946509][ T6960] netlink: 'syz.0.326': attribute type 8 has an invalid length.
[   79.027918][ T5840] Bluetooth: hci0: command tx timeout
[   79.033282][ T6965] tipc: Enabled bearer <udp:syz0>, priority 10
[   79.105173][ T6971] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[   79.141754][ T6971] bond2 (unregistering): Released all slaves
[   79.241734][ T6979] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   79.267890][ T6979] ieee802154 phy0 wpan0: encryption failed: -22
[   79.306921][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.311722][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.315583][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.318486][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.322665][ T6988] batman_adv: batadv0: Removing interface: ipvlan2
[   79.678895][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.762494][ T7021] IPv6: sit1: Disabled Multicast RS
[   79.843471][ T7035] xt_socket: unknown flags 0xd0
[   79.877386][ T7037] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[   79.902521][ T7037] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   79.913748][ T7037] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface
[   79.919627][ T7037] bond4 (unregistering): Released all slaves
[   79.985790][ T7045] netlink: 'syz.0.351': attribute type 4 has an invalid length.
[   80.015340][ T7045] netlink: 'syz.0.351': attribute type 4 has an invalid length.
[   80.627736][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.637335][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.890874][ T7069] __nla_validate_parse: 77 callbacks suppressed
[   80.890884][ T7069] netlink: 224 bytes leftover after parsing attributes in process `syz.1.359'.
[   80.896472][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   80.918925][ T7071] netlink: 3 bytes leftover after parsing attributes in process `syz.2.360'.
[   80.946731][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[   80.980683][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'.
[   80.985401][ T7077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.362'.
[   81.014010][ T7082] bond4 (unregistering): Released all slaves
[   81.268551][   T51] cfg80211: failed to load regulatory.db
[   81.451933][ T7117] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   81.455770][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.491803][ T7119] syzkaller1: entered promiscuous mode
[   81.494137][ T7119] syzkaller1: entered allmulticast mode
[   81.596787][ T7121] netlink: 'syz.0.375': attribute type 11 has an invalid length.
[   81.599162][ T7121] netlink: 224 bytes leftover after parsing attributes in process `syz.0.375'.
[   81.746829][   T51] net_ratelimit: 3 callbacks suppressed
[   81.746841][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.907261][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.069722][ T7139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.381'.
[   82.169402][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'.
[   82.279186][ T7151] syzkaller0: entered promiscuous mode
[   82.281002][ T7151] syzkaller0: entered allmulticast mode
[   82.575965][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'.
[   82.787346][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.620080][ T7195] validate_nla: 4 callbacks suppressed
[   83.620092][ T7195] netlink: 'syz.1.401': attribute type 10 has an invalid length.
[   83.635057][ T7195] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.678688][ T7200] bridge_slave_0: left allmulticast mode
[   83.680730][ T7200] bridge_slave_0: left promiscuous mode
[   83.683096][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.691957][ T7200] bridge_slave_1: left allmulticast mode
[   83.694081][ T7200] bridge_slave_1: left promiscuous mode
[   83.695958][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.707828][ T7200] bond0: (slave bond_slave_0): Releasing backup interface
[   83.714138][ T7200] bond0: (slave bond_slave_1): Releasing backup interface
[   83.725339][ T7200] team0: Port device team_slave_0 removed
[   83.734197][ T7200] team0: Port device team_slave_1 removed
[   83.738502][ T7200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   83.828644][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.838154][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.204263][ T7214] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   84.334367][ T7221] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   84.506935][ T7230] netlink: 'syz.2.412': attribute type 2 has an invalid length.
[   84.664074][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.842415][ T7245] netlink: 'syz.2.418': attribute type 4 has an invalid length.
[   84.849658][ T7245] netlink: 'syz.2.418': attribute type 4 has an invalid length.
[   84.866999][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.042938][ T7255] netlink: 'syz.2.422': attribute type 4 has an invalid length.
[   85.049796][ T7255] : renamed from bond0
[   85.269286][ T7264] netlink: 'syz.2.425': attribute type 12 has an invalid length.
[   85.351597][ T7269] team0: Device gtp0 is of different type
[   85.465393][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.543746][ T7292] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   85.581700][ T7292] bond0 (unregistering): Released all slaves
[   85.634824][ T7296] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   85.773058][ T7304] netlink: 'syz.1.437': attribute type 1 has an invalid length.
[   85.907441][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.175275][ T7310] netlink: 'syz.0.439': attribute type 12 has an invalid length.
[   86.250911][ T7318] bond4 (unregistering): Released all slaves
[   86.265264][ T7330] netlink: 'syz.2.440': attribute type 1 has an invalid length.
[   86.399652][  T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.492185][ T7341] wg2: entered promiscuous mode
[   86.496360][ T7341] wg2: entered allmulticast mode
[   86.603062][ T7347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   86.610616][ T7348] tipc: Resetting bearer <eth:syzkaller0>
[   86.804578][ T7366] tap0: tun_chr_ioctl cmd 1074025677
[   86.806982][ T7366] tap0: linktype set to 270
[   86.867867][ T7368] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003
[   86.954520][   T51] net_ratelimit: 9 callbacks suppressed
[   86.954536][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.028766][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.036038][ T7381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.039392][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.126822][ T7384] __nla_validate_parse: 11 callbacks suppressed
[   87.126838][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'.
[   87.132897][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'.
[   87.175050][ T7386] dvmrp0: entered allmulticast mode
[   87.931369][ T7407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.466'.
[   87.996875][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.308431][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.312454][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.319687][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.320164][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   88.821813][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'.
[   88.834997][ T7427] netlink: 9 bytes leftover after parsing attributes in process `syz.1.469'.
[   88.840655][ T7427] ..0: renamed from hsr0 (while UP)
[   88.846441][ T7427] ..0: entered allmulticast mode
[   88.850762][ T7427] hsr_slave_0: entered allmulticast mode
[   88.852760][ T7427] hsr_slave_1: entered allmulticast mode
[   88.855171][ T7427] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   88.873472][ T7427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.887677][ T7431] validate_nla: 2 callbacks suppressed
[   88.887693][ T7431] netlink: 'syz.2.473': attribute type 1 has an invalid length.
[   89.069813][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[   89.074896][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'.
[   89.088396][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'.
[   89.204767][ T7460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.209212][ T7460] netlink: 188 bytes leftover after parsing attributes in process `syz.2.482'.
[   89.213420][ T7460] syzkaller0: entered promiscuous mode
[   89.215859][ T7460] syzkaller0: entered allmulticast mode
[   89.237442][ T7460] tipc: Resetting bearer <eth:syzkaller0>
[   89.241275][ T7457] tipc: Resetting bearer <eth:syzkaller0>
[   89.250690][ T7457] tipc: Disabling bearer <eth:syzkaller0>
[   89.453670][ T7482] tap0: tun_chr_ioctl cmd 1074025676
[   89.455616][ T7482] tap0: owner set to 0
[   89.563522][ T7496] netlink: 'syz.0.494': attribute type 28 has an invalid length.
[   89.732575][ T7510] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[   89.733963][ T7511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.499'.
[   90.105668][ T7540] netlink: 'syz.0.507': attribute type 1 has an invalid length.
[   90.224430][ T7546] IPv6: Can't replace route, no match found
[   90.442732][ T7569] netlink: 'syz.1.516': attribute type 23 has an invalid length.
[   90.451476][ T7569] netlink: 'syz.1.516': attribute type 3 has an invalid length.
[   90.482444][ T7568] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[   90.556464][ T7579] netlink: 'syz.1.521': attribute type 1 has an invalid length.
[   90.564116][ T7579] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   90.578037][ T7576] syzkaller1: entered promiscuous mode
[   90.583580][ T7576] syzkaller1: entered allmulticast mode
[   90.700282][ T7591] netlink: 'syz.1.525': attribute type 1 has an invalid length.
[   90.735647][ T7593] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004
[   90.770419][   T10] IPVS: starting estimator thread 0...
[   90.879182][ T7600] IPVS: using max 64 ests per chain, 153600 per kthread
[   91.064600][ T7627] IPVS: length: 163 != 8
[   91.348841][ T7654] netlink: 'syz.2.542': attribute type 3 has an invalid length.
[   92.147375][   T24] net_ratelimit: 20 callbacks suppressed
[   92.147386][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.172889][ T7677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.176744][ T7676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.314549][ T7695] __nla_validate_parse: 11 callbacks suppressed
[   92.314567][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'.
[   92.315628][ T7696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.324781][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.621184][ T7727] syzkaller1: entered promiscuous mode
[   92.623103][ T7727] syzkaller1: entered allmulticast mode
[   92.797881][ T7731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.079373][ T7743] sctp: [Deprecated]: syz.0.564 (pid 7743) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.079373][ T7743] Use struct sctp_sack_info instead
[   93.187539][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.430948][ T7761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.434274][ T7761] syzkaller0: entered promiscuous mode
[   93.436535][ T7761] syzkaller0: entered allmulticast mode
[   93.449912][ T7761] tipc: Resetting bearer <eth:syzkaller0>
[   93.462336][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[   93.514259][   T24] IPVS: starting estimator thread 0...
[   93.516471][ T7760] tipc: Resetting bearer <eth:syzkaller0>
[   93.518052][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.521797][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.529340][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.533396][ T7760] tipc: Disabling bearer <eth:syzkaller0>
[   93.541291][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.543913][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.617194][ T7768] IPVS: using max 64 ests per chain, 153600 per kthread
[   93.670879][ T7774] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000
[   93.793119][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[   93.803008][ T7785] raw_sendmsg: syz.2.577 forgot to set AF_INET. Fix it!
[   93.869112][ T7791] netlink: 6 bytes leftover after parsing attributes in process `syz.0.580'.
[   93.872557][ T7791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.580'.
[   93.962644][ T7801] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   94.362742][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'.
[   94.403602][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.432649][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.439701][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.443857][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.523488][ T5891] IPVS: stop unused estimator thread 0...
[   94.548825][ T1091] wlan0: Trigger new scan to find an IBSS to join
[   94.615645][ T7832] team0: entered promiscuous mode
[   94.621250][ T7832] team_slave_0: entered promiscuous mode
[   94.623559][ T7832] team_slave_1: entered promiscuous mode
[   94.633854][ T7832] team0: entered allmulticast mode
[   94.635907][ T7832] team_slave_0: entered allmulticast mode
[   94.639658][ T7832] team_slave_1: entered allmulticast mode
[   94.853485][ T7852] TCP: TCP_TX_DELAY enabled
[   95.252112][ T7890] validate_nla: 5 callbacks suppressed
[   95.252121][ T7890] netlink: 'syz.1.610': attribute type 1 has an invalid length.
[   96.013651][ T7937] nbd: must specify a device to reconfigure
[   96.018269][ T7937] syz.0.625 (7937) used greatest stack depth: 19000 bytes left
[   96.489038][ T7981] bond4: entered promiscuous mode
[   96.493119][ T7981] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.505355][ T7982] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.508526][ T7982] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[   96.512492][ T7982] bond4: (slave vcan0): Error -95 calling set_mac_address
[   96.651426][ T7992] dvmrp8: entered allmulticast mode
[   96.978256][ T7993] dvmrp8: left allmulticast mode
[   97.272162][   T10] net_ratelimit: 26 callbacks suppressed
[   97.272177][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.352251][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.378994][ T8015] __nla_validate_parse: 78 callbacks suppressed
[   97.379009][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'.
[   97.423629][ T8023] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[   97.427622][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.433591][ T8023] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[   97.506911][   T28] wlan0: Trigger new scan to find an IBSS to join
[   97.668075][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[   97.702820][ T8038] netlink: 'syz.1.651': attribute type 11 has an invalid length.
[   97.717491][ T8038] netlink: 44 bytes leftover after parsing attributes in process `syz.1.651'.
[   97.843961][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'.
[   97.901614][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'.
[   97.924397][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'.
[   97.929247][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'.
[   97.983353][ T8068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   97.986874][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.155322][ T8071] netlink: 'syz.1.658': attribute type 10 has an invalid length.
[   98.161024][ T8071] netlink: 'syz.1.658': attribute type 10 has an invalid length.
[   98.162438][ T8080] netlink: 256 bytes leftover after parsing attributes in process `syz.2.660'.
[   98.163621][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'.
[   98.169721][ T8080] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[   98.204283][ T8078] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.209494][ T8078] bond0: (slave bond5): Enslaving as an active interface with an up link
[   98.215335][ T8080] bond5 (unregistering): Released all slaves
[   98.294566][ T8086] veth1_to_bond: entered allmulticast mode
[   98.306306][ T8086] bond_slave_1: entered promiscuous mode
[   98.310708][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'.
[   98.315454][ T8085] bond_slave_1: left promiscuous mode
[   98.318320][ T8085] veth1_to_bond: left allmulticast mode
[   98.386308][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'.
[   98.391624][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.401595][ T8096] netlink: 'syz.2.664': attribute type 6 has an invalid length.
[   98.471519][ T8109] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.549247][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.562684][ T8113] netlink: 'syz.0.670': attribute type 1 has an invalid length.
[   99.300370][ T8180] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[   99.438883][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.453601][ T8194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.546129][ T8191] batadv0: left allmulticast mode
[   99.550589][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.553434][ T8191] batadv0: entered allmulticast mode
[   99.555920][ T8191] : (slave batadv0): Enslaving as an active interface with an up link
[   99.562732][ T8191] batadv0: entered promiscuous mode
[   99.575645][ T8201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.863751][ T8191] : (slave batadv0): Releasing backup interface
[   99.870984][ T8191] bridge0: port 3(batadv0) entered blocking state
[   99.873665][ T8191] bridge0: port 3(batadv0) entered disabled state
[   99.973281][ T5891] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   99.977005][ T5891] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  100.523553][ T8260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.549158][  T145] wlan0: Trigger new scan to find an IBSS to join
[  100.749055][ T8278] validate_nla: 5 callbacks suppressed
[  100.749071][ T8278] netlink: 'syz.1.721': attribute type 12 has an invalid length.
[  100.754226][ T8278] netlink: 'syz.1.721': attribute type 11 has an invalid length.
[  101.150611][ T8320] netlink: 'syz.0.728': attribute type 9 has an invalid length.
[  101.318950][ T8324] infiniband syz2: set down
[  101.321871][ T8324] infiniband syz2: added ipvlan0
[  101.345763][ T8324] RDS/IB: syz2: added
[  101.347417][ T8324] smc: adding ib device syz2 with port count 1
[  101.349399][ T8324] smc:    ib device syz2 port 1 has no pnetid
[  101.479725][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.904033][ T8340] batadv0: entered promiscuous mode
[  101.906160][ T8340] batadv0: entered allmulticast mode
[  102.383823][ T8384] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  102.427210][ T8387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.437091][ T8387] syzkaller0: entered promiscuous mode
[  102.439012][ T8387] syzkaller0: entered allmulticast mode
[  102.462367][ T8387] tipc: Resetting bearer <eth:syzkaller0>
[  102.467504][ T8386] tipc: Resetting bearer <eth:syzkaller0>
[  102.481118][ T8386] tipc: Disabling bearer <eth:syzkaller0>
[  102.546741][ T5869] net_ratelimit: 108 callbacks suppressed
[  102.546752][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  102.577610][ T8396] netlink: 'syz.2.746': attribute type 1 has an invalid length.
[  102.607651][ T8396] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  102.859601][ T8417] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  102.923133][ T8425] __nla_validate_parse: 85 callbacks suppressed
[  102.923145][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  102.933101][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  102.933142][ T8427] netlink: 'syz.0.752': attribute type 2 has an invalid length.
[  102.940514][ T8427] netlink: 164 bytes leftover after parsing attributes in process `syz.0.752'.
[  102.984806][ T8431] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  103.241157][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  103.586895][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.865805][ T8459] pimreg: entered allmulticast mode
[  103.879664][ T8459] dvmrp0: left allmulticast mode
[  103.882060][ T8459] pimreg: left allmulticast mode
[  104.626902][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.629669][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.668083][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.493835][ T8466] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.710112][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.870889][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.874473][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  107.028488][ T8515] netlink: 104 bytes leftover after parsing attributes in process `syz.1.774'.
[  107.078384][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'.
[  107.115875][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'.
[  107.185821][ T8525] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.321775][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'.
[  107.413200][ T8538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.772'.
[  107.509393][ T8552] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  107.515378][ T8552] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  107.522087][ T8552] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  107.669183][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.753282][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.850401][ T8580] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[  108.170903][ T8604] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  108.214980][ T8613] __nla_validate_parse: 4 callbacks suppressed
[  108.214992][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  108.224874][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  108.259120][ T8618] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  108.321670][ T8623] netlink: 'syz.1.799': attribute type 1 has an invalid length.
[  108.348316][ T8623] bond7: (slave bridge5): making interface the new active one
[  108.354094][ T8623] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  108.392891][ T8632] netlink: 84 bytes leftover after parsing attributes in process `syz.1.801'.
[  108.426858][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.514433][ T8645] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[  108.684779][ T8655] openvswitch: netlink: Actions may not be safe on all matching packets
[  108.689447][ T8655] netlink: 'syz.1.810': attribute type 8 has an invalid length.
[  108.770672][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'.
[  108.784665][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'.
[  108.797987][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.875569][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'.
[  109.121631][ T8681] syzkaller1: entered promiscuous mode
[  109.123357][ T8681] syzkaller1: entered allmulticast mode
[  109.130718][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'.
[  109.346919][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.418997][ T8684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.469381][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  109.470961][ T8688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.605216][ T8703] netlink: 'syz.0.826': attribute type 1 has an invalid length.
[  109.660295][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.827'.
[  109.830716][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.893600][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'.
[  109.940161][ T8735] netlink: 'syz.0.835': attribute type 1 has an invalid length.
[  110.043143][ T8739] lo: left allmulticast mode
[  110.057214][ T8747] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  110.060027][ T8747] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  110.074249][ T8747] syzkaller0: mtu less than device minimum
[  110.352290][ T8772] netlink: 'syz.2.845': attribute type 21 has an invalid length.
[  110.355468][ T8772] netlink: 'syz.2.845': attribute type 22 has an invalid length.
[  110.358969][ T8772] netlink: 'syz.2.845': attribute type 23 has an invalid length.
[  110.460545][ T8797] bpq0: entered promiscuous mode
[  110.544222][ T8806] Oops: general protection fault, probably for non-canonical address 0xebe827c82b7b113c: 0000 [#1] SMP KASAN PTI
[  110.548794][ T8806] KASAN: maybe wild-memory-access in range [0x5f415e415bd889e0-0x5f415e415bd889e7]
[  110.552895][ T8806] CPU: 1 UID: 0 PID: 8806 Comm: syz.2.854 Not tainted syzkaller #0 PREEMPT(full) 
[  110.556433][ T8806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.559790][ T8806] RIP: 0010:xfrm_alloc_spi+0x3ac/0xf30
[  110.561676][ T8806] Code: 2b 4d 85 ed 0f 94 c0 49 83 c5 d8 0f 94 c1 08 c1 74 0a e8 27 3d 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 9f 01 00 00 8b 1b 89 df 44 89 f6 e8 bb
[  110.568608][ T8806] RSP: 0018:ffffc900080d70e0 EFLAGS: 00010207
[  110.570550][ T8806] RAX: 0be82bc82b7b113c RBX: 5f415e415bd889e4 RCX: 0000000000080000
[  110.572915][ T8806] RDX: ffffc90003a91000 RSI: 00000000000001b1 RDI: 00000000000001b2
[  110.575404][ T8806] RBP: ffffc900080d7230 R08: 0000000000000000 R09: ffffffff8a227030
[  110.578272][ T8806] R10: dffffc0000000000 R11: fffff5200101ae0c R12: dffffc0000000000
[  110.581132][ T8806] R13: 5f415e415bd88920 R14: 0000000094010000 R15: ffffc900080d76a0
[  110.583964][ T8806] FS:  00007f86cc23c6c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  110.587391][ T8806] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.589679][ T8806] CR2: 0000200000000080 CR3: 0000000122914000 CR4: 00000000000006f0
[  110.592444][ T8806] Call Trace:
[  110.593799][ T8806]  <TASK>
[  110.594940][ T8806]  ? xfrm_alloc_spi+0x2a0/0xf30
[  110.596599][ T8806]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  110.598553][ T8806]  ? xfrm_find_acq+0x87/0xa0
[  110.600371][ T8806]  xfrm_alloc_userspi+0x70b/0xc90
[  110.602198][ T8806]  ? apparmor_capable+0x137/0x1b0
[  110.603993][ T8806]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  110.606008][ T8806]  ? __nla_parse+0x40/0x60
[  110.607617][ T8806]  xfrm_user_rcv_msg+0x7a3/0xab0
[  110.609283][ T8806]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  110.611416][ T8806]  ? __pfx___mutex_trylock_common+0x10/0x10
[  110.613511][ T8806]  ? rcu_is_watching+0x15/0xb0
[  110.615235][ T8806]  ? trace_contention_end+0x39/0x120
[  110.617194][ T8806]  ? __mutex_lock+0x335/0x1350
[  110.618951][ T8806]  netlink_rcv_skb+0x208/0x470
[  110.620653][ T8806]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  110.622555][ T8806]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  110.624323][ T8806]  ? netlink_deliver_tap+0x2e/0x1b0
[  110.626036][ T8806]  ? netlink_deliver_tap+0x2e/0x1b0
[  110.627757][ T8806]  xfrm_netlink_rcv+0x79/0x90
[  110.629239][ T8806]  netlink_unicast+0x82f/0x9e0
[  110.630979][ T8806]  ? __pfx_netlink_unicast+0x10/0x10
[  110.633064][ T8806]  ? netlink_sendmsg+0x642/0xb30
[  110.634981][ T8806]  ? skb_put+0x11b/0x210
[  110.636604][ T8806]  netlink_sendmsg+0x805/0xb30
[  110.638283][ T8806]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.640198][ T8806]  ? aa_sock_msg_perm+0xf1/0x1d0
[  110.642068][ T8806]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.644078][ T8806]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.646119][ T8806]  __sock_sendmsg+0x21c/0x270
[  110.647860][ T8806]  ____sys_sendmsg+0x505/0x830
[  110.649714][ T8806]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.651817][ T8806]  ? import_iovec+0x74/0xa0
[  110.653606][ T8806]  ___sys_sendmsg+0x21f/0x2a0
[  110.655473][ T8806]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.657527][ T8806]  ? __fget_files+0x2a/0x420
[  110.659325][ T8806]  ? __fget_files+0x3a0/0x420
[  110.661169][ T8806]  __x64_sys_sendmsg+0x19b/0x260
[  110.663070][ T8806]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  110.664914][ T8806]  ? rcu_is_watching+0x15/0xb0
[  110.666631][ T8806]  ? do_syscall_64+0xbe/0x3b0
[  110.668322][ T8806]  do_syscall_64+0xfa/0x3b0
[  110.669887][ T8806]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.671713][ T8806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.673818][ T8806]  ? exc_page_fault+0x9f/0xf0
[  110.675435][ T8806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.677564][ T8806] RIP: 0033:0x7f86cb38eba9
[  110.679199][ T8806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.685351][ T8806] RSP: 002b:00007f86cc23c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.688256][ T8806] RAX: ffffffffffffffda RBX: 00007f86cb5d5fa0 RCX: 00007f86cb38eba9
[  110.690926][ T8806] RDX: 0000000024000014 RSI: 0000200000000080 RDI: 0000000000000003
[  110.693621][ T8806] RBP: 00007f86cb411e19 R08: 0000000000000000 R09: 0000000000000000
[  110.696518][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.699429][ T8806] R13: 00007f86cb5d6038 R14: 00007f86cb5d5fa0 R15: 00007ffe3f12b518
[  110.702319][ T8806]  </TASK>
[  110.703381][ T8806] Modules linked in:
[  110.705313][ T8806] ---[ end trace 0000000000000000 ]---
[  110.707547][ T8806] RIP: 0010:xfrm_alloc_spi+0x3ac/0xf30
[  110.709632][ T8806] Code: 2b 4d 85 ed 0f 94 c0 49 83 c5 d8 0f 94 c1 08 c1 74 0a e8 27 3d 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 9f 01 00 00 8b 1b 89 df 44 89 f6 e8 bb
[  110.717100][ T8806] RSP: 0018:ffffc900080d70e0 EFLAGS: 00010207
[  110.719593][ T8806] RAX: 0be82bc82b7b113c RBX: 5f415e415bd889e4 RCX: 0000000000080000
[  110.722807][ T8806] RDX: ffffc90003a91000 RSI: 00000000000001b1 RDI: 00000000000001b2
[  110.725976][ T8806] RBP: ffffc900080d7230 R08: 0000000000000000 R09: ffffffff8a227030
[  110.729315][ T8806] R10: dffffc0000000000 R11: fffff5200101ae0c R12: dffffc0000000000
[  110.732560][ T8806] R13: 5f415e415bd88920 R14: 0000000094010000 R15: ffffc900080d76a0
[  110.735703][ T8806] FS:  00007f86cc23c6c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  110.739377][ T8806] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.742052][ T8806] CR2: 0000200000000080 CR3: 0000000122914000 CR4: 00000000000006f0
[  110.745275][ T8806] Kernel panic - not syncing: Fatal exception in interrupt
[  110.748847][ T8806] Kernel Offset: disabled
[  110.750191][ T8806] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:37:22  Registers:
info registers vcpu 0

CPU#0
RAX=a6721e5999d0e400 RBX=ffffffff819683f8 RCX=a6721e5999d0e400 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f86cc23bfc8 CR3=00000000250e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5a5e812e53
XMM06=0000000000000000 00007f5a5e812e4d XMM07=0000000000000000 00007f5a5e812e61
XMM08=0000000000000000 00007f5a5e812ee7 XMM09=0000000000000000 00007f5a5e812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013ba RDI=00000000000013bb RBP=00000000000003f8 RSP=ffffc900080d6870
R8 =ffff888021340237 R9 =1ffff11004268046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018c2 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f86cc23c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=0000000122914000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f86cb5a7498 00007f86cb5a7470 XMM03=00007f86cb5a74a8 00007f86cb5a74a0
XMM04=00007f86cc10d100 00007f86cb5a7460 XMM05=00007f86cb5a7478 00007f86cb5a74c0
XMM06=00007f86cb5a74b8 00007f86cb5a74b0 XMM07=00007f86cb5a74a8 00007f86cb5a74a0
XMM08=0000000000000000 00007f86cb412ee7 XMM09=0000000000000000 00007f86cb412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
