last executing test programs:

2.469792956s ago: executing program 1 (id=1203):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x38}, 0x2, 0x34005}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r4 = accept(r0, 0x0, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r0})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xf51)
readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e20, 0x5, @mcast1, 0x4}, 0x1c)
shutdown(r6, 0x1)
setsockopt(r6, 0x84, 0x82, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x47c5, 0x4)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x5, @private0, 0xffffff74, 0x3}, 0x20)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000980)=""/4096, &(0x7f00000001c0)=0x1000)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="2aa229111272ff", 0x7}, {&(0x7f0000000200)="3cc5c48b32b27a215ed6734667e778fd5e31bd2a645c1ad3521f8bb3347afdda1150f0871a3dc29260bd8c43222471588c75a894d31eb4e0a8b9439adf553dd6c343aa6a7cb47d37bfcc1b89ff13a3e68d9ec5751948ea50e29915258db6597fa5c3ed168fe9704d5ecced81fd9dc1400a7b749d9495e6e621", 0x79}], 0x2}, 0x24044014)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

1.67866317s ago: executing program 2 (id=1225):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20000050)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNGETVNETLE(r2, 0x400454de, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
read$alg(r4, &(0x7f00000001c0)=""/34, 0x22)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(0x0, r6)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f000001060001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r10, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00"/65], 0x6c}}, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1016], 0x3f8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)

1.599616763s ago: executing program 1 (id=1226):
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:* rwm '], 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @private}}}})
write$tun(r3, &(0x7f0000000200)=ANY=[@ANYRES64=r4], 0xc2)
socketpair(0xc, 0x5, 0xfffffffd, 0x0)
r6 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000100)={0x0, 0xffffffffffffff53, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3904feffffff000002005c00000008000300", @ANYRES32=r9, @ANYBLOB="cfe8ff0000000000"], 0x24}}, 0x4004000)
accept4$nfc_llcp(r5, 0x0, 0x0, 0x800)
r10 = socket$inet(0x2b, 0x801, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000000b000700000000000000000a0000000800024000000002080002400795d7f24dd072434f2753e82300000005"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$int_in(r10, 0x5452, &(0x7f0000000280)=0x8)
writev(r1, &(0x7f0000001600), 0x0)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x63ec47b94f30c287)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da045d67563bc2ff477919ae00", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x0, 0x0, 0x10}})

732.627611ms ago: executing program 1 (id=1230):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000002000009050004000000000005000100070000000000000000000000100000"], 0x24}, 0x1, 0x0, 0x0, 0x8401}, 0x4040000)
sendto$netrom(0xffffffffffffffff, &(0x7f00000004c0)="35bb31ed02107a22741c435ff12f0bf2b689d7866517a943b8cfacc5387897aaf6583604cf2b5035c75549544d46fb53ca9683ee4bfc22e50abc3b9e41b49c598466f6adb23578732f7d2b529666372dee88703c3a401254089d1c54f655622458f21cfccabea740dd39fd466e4a3045e8609899b70cd02819a0c5603ce03cf7c0ef100c31ca5aab06ccde83fc8a8a06c870c93796e0625243648d3d845033197af8950718ed28fc4848f73741b1d3da035c83f7b7f2c45e1eaa29119172d6ead74d07f4782b0b386e06185751c27642baaf108982c7e8cde899c619876310f4bae9cc5142", 0xe5, 0x8040, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02dc24c9b9000000180000000000000084"], 0x38}, 0x200048d0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) (async)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

647.206632ms ago: executing program 1 (id=1232):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r2], 0x50}, 0x306}, 0x2)

588.154315ms ago: executing program 1 (id=1234):
syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000300001500000086dd6000000900383a00fe880000000000000000000000000101ff02000000000000000000421f9b9167b2cd3778000005dc608cb02b00092f0000000000000000000000000000000001fe8000000000000000000000000000aa8b0027a168000000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x400000000010, 0x2, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0xfffffff8}, {0x8, 0x0, 0x6, 0x1}]})
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6)
r10 = socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20004880)
bind$inet6(r10, 0x0, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, 0x0, 0x0)
setsockopt$inet6_int(r11, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, 0x0, 0x8)

586.209612ms ago: executing program 2 (id=1235):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000d80)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00a'], 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@ipv4_newrule={0x54, 0x20, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x8, 0x10005}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee00}}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x7e}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x30008000}, 0x4000004)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'veth0\x00', 0x4000})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r5, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f0000000100)="b700"/11, 0xb}, {&(0x7f0000000040)="37a8", 0x2}, {&(0x7f0000000280)="3de496b2", 0x4}], 0x4) (async)
r7 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x9}}, 0x2, 0x9, 0xe7, 0x2, 0x2}, &(0x7f00000004c0)=0x98) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, 0x0, &(0x7f0000003f80)) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x50}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
sendmmsg$inet_sctp(r7, &(0x7f0000004080), 0x0, 0x400c001)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r9, @ANYBLOB="0198000000000000240012800b0001006970764e79639c45bfdb708d801ace6c616e00001400028006000100"], 0x44}}, 0x0) (async)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @local}, 0x14)
socket$inet_icmp(0x2, 0x2, 0x1)

477.872642ms ago: executing program 1 (id=1237):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet(0xa, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4, r0}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xf, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a00110001", 0x13)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x8, 0x80000001}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty}}, 0x4, 0x0, 0x80, 0x0, 0x8a}, 0x9c)
accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
socket(0x10, 0x3, 0x0)

469.463499ms ago: executing program 2 (id=1238):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009549bf7873d3346de784e8719ee2987f9030d5b435c2a1ee39c701d243e93b61d8226ae1393302d1287e559732f7d0394eff6452f7f51063848cb30cb33ab0064af115106d4145bbabbac1162ee7bded5e4a5fb33413c001d80c88f793cb69eccbb2f219"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x4000010)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

389.643641ms ago: executing program 2 (id=1239):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000007740)='fsi_master_acf_copro_response\x00', r0, 0x0, 0xa}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000024c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRES16=r4], 0x1000f)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000013c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="1205020029ff14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da", 0x2c}, {&(0x7f0000000540)="a18349b6170b671a8f0f7b681b516aa8353e655f1967c0c5418efb4f4285d0b386e2660c891763ed2dc8fdf281e643e5", 0x30}], 0x2}, 0x24000894)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f479ee44085600c3e931dd61be4e51fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2000088b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae00", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x3}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
r8 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040))

309.728883ms ago: executing program 2 (id=1241):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280))
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

249.290249ms ago: executing program 2 (id=1243):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd97ecfedbdf25021000ea1300020076657468305faa6c616e0000000000001400a3f1c6a99c9e41020070696d3672656731007f168f9c9fd1dbe2af9a0bd34c23177872b0b50c78820b07c8a81d4609338c036a6daf778fd377c1cfda1c2874c30ad3844b9715eb07826fdc57ffeb38cc51e1e8806076fc2ce643754dde7b452d2bff4b31110c7110cb65a04822e4d672cecf2580df"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000)

178.842961ms ago: executing program 0 (id=1244):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x0, 0x0, 0x0, 0x2}})

177.987228ms ago: executing program 0 (id=1245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a01040000000000000000010000052400048020000180080001006e617400140002800800054000000017080001400000000408000b40000000000900010073797a30"], 0xc0}}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x10001, 0x18}, 0xc)
sendmsg$sock(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="462fe221986a1a8b58ba189193d48f42f2d51167e8d9962dde78416d0d80127d152e24eb95f14bcb6b36ebd77932659f96304a0e3d87ca4bf39d0dad7c740c9006b13354e46bbd7105bee93ce24e7142ad16ad5acbd6a39f32dd56e3867578eb90b70520ffdaf4339d42b7f403bb61bd0dc1fff698ab50a3", 0x78}, {&(0x7f0000000340)="8987e1c8a6251086b252e70f93520bdab757988ce9bed065709cd2cf5df03448a1d45de313e7e9aa8b9c5343c22a3dcdc1c84273d5744192fd3919726e55c2b47cb2c4e6451fa734030d46dea6b8b671", 0x50}, {&(0x7f00000003c0)="0b71029f4833f20fbf0f58a8c5ee749cb81222353d05c770b607b6f1d7967e1a828015ce568cd3ccea02dac281f04898e05cd1300e063de1071a1ac52a9a55eaaa6660816fbec02fa5d06fd168f49660e5c9b154dfd1129d92687cc51b92c3f95a511a4301f4", 0x66}, {&(0x7f0000000440)="843a1048c828435cc0462afd78f65a4f2ac489375ff05d249039b2c88284bc3161ef860bfed8527230b8d10743058330a31a443d3464301d6042fe6f965ce35eec3bb1fa9b4a99aedabad346c98ab391e8d51129742355a387d2fe970f95e4a6c985a67e46e869952a5b25b1a3ae70eb11bdd187ae0b0ca692e09554df2cb0e9d2ca31b9e0962431c3bcdb30c4cd7d0eb21c639e884b71fd3f1e9e876b4762ff455efb5107d81d54897c3a5b8f7e1748be7d5f8c4a3ab5ff4234e33b02117eeafc9bbb3b24b9018801084a44c446", 0xce}, {&(0x7f0000000540)="08ddad1625ea753010cf40fdcaa3f2a4048580e202d13b54e1da45f957332e0098c367dc551d11f42d03658c37b9c2bc1a85eb2a55fe9d0a372fb21bb1c6ac06dbf0aee11bb9421e8c97cfaba2d20332566e4e8570a6d66ac01bd360ec9e47891c07179ed268946406c939ef1c9cb10f1c5bb24ab476ae328e66e90488a8afc923278874ceaf38440a04e2845055fe8586e2bfa5e82fe5aa3906537c7b5255ab876fe3619459ac4240087f7d79510f1eee13b40d2484f83749e5b553b921e386148126bd9cf7e23f84bbd2c96f1d2113466cec", 0xd3}, {&(0x7f0000000640)="172350a551d95357f5525039b3a99f64071259e1", 0x14}, {&(0x7f0000000d40)="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", 0x1000}], 0x7}, 0x4000801)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0xfffffffffffffeff)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={@loopback, 0x3d, r4})

119.229108ms ago: executing program 0 (id=1246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001500000000000675685a6d1b99e99b9100270000844a00"], 0x44}}, 0x0)

92.965332ms ago: executing program 0 (id=1247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0xc)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x2, 0x5, 0x2, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10, r1}, 0x18)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x9, 0x18}, 0xc)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r11)
ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa8b9, 0x0, 0x0, 0x0, 0x5bb}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @jmp={0x5, 0x0, 0x2, 0x9, 0x9, 0xfffffffffffffff0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x36d}, @jmp={0x5, 0x1, 0x3, 0x3, 0x8, 0x40, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x8c, &(0x7f0000000200)=""/140, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x1, r3, r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000680)=[{0x1, 0x3, 0xd}], 0x10, 0x80000000}, 0x94)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "de4adce05c555b9e87c4e38039149fcb3b3657006c476fd00df8b93f10000200", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

92.404471ms ago: executing program 0 (id=1248):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afd3ecd36a849524b4d4c1f5f31e332b5c9bd8a2d138151e1c34750000000300", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

0s ago: executing program 0 (id=1249):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24044005}, 0x800)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89", 0x0, 0x0, 0x0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000000))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50391' (ED25519) to the list of known hosts.
syzkaller login: [   48.542896][ T5834] cgroup: Unknown subsys name 'net'
[   48.643569][ T5834] cgroup: Unknown subsys name 'cpuset'
[   48.649070][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.369197][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.703317][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.707216][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.711360][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.714119][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.716710][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.727542][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.732736][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.735775][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.739567][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.743421][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.792011][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.795157][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.798438][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.802440][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.805488][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.970278][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.077575][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.100919][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.104295][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.107279][ T5845] bridge_slave_0: entered allmulticast mode
[   55.112212][ T5845] bridge_slave_0: entered promiscuous mode
[   55.133326][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.136350][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.139408][ T5845] bridge_slave_1: entered allmulticast mode
[   55.143935][ T5845] bridge_slave_1: entered promiscuous mode
[   55.193103][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.199020][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.275665][ T5845] team0: Port device team_slave_0 added
[   55.293134][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.295764][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.298415][ T5849] bridge_slave_0: entered allmulticast mode
[   55.302783][ T5849] bridge_slave_0: entered promiscuous mode
[   55.308600][ T5845] team0: Port device team_slave_1 added
[   55.311795][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.314504][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.317379][ T5849] bridge_slave_1: entered allmulticast mode
[   55.322471][ T5849] bridge_slave_1: entered promiscuous mode
[   55.363163][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.365695][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.375110][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.384997][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.388242][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   55.393253][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.395725][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.404366][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.410466][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.440267][ T5849] team0: Port device team_slave_0 added
[   55.462185][ T5849] team0: Port device team_slave_1 added
[   55.514586][ T5845] hsr_slave_0: entered promiscuous mode
[   55.517296][ T5845] hsr_slave_1: entered promiscuous mode
[   55.520739][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.523640][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.534403][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.556524][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.559259][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.569999][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.575090][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.578133][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.581887][ T5856] bridge_slave_0: entered allmulticast mode
[   55.585641][ T5856] bridge_slave_0: entered promiscuous mode
[   55.627012][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.629567][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.633488][ T5856] bridge_slave_1: entered allmulticast mode
[   55.636380][ T5856] bridge_slave_1: entered promiscuous mode
[   55.693923][ T5849] hsr_slave_0: entered promiscuous mode
[   55.696898][ T5849] hsr_slave_1: entered promiscuous mode
[   55.701088][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   55.703488][ T5849] Cannot create hsr debugfs directory
[   55.714917][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.721586][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.799802][ T5856] team0: Port device team_slave_0 added
[   55.815552][ T5856] team0: Port device team_slave_1 added
[   55.851616][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.854150][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.863499][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.880160][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.883966][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.894669][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.993207][ T5856] hsr_slave_0: entered promiscuous mode
[   55.996576][ T5856] hsr_slave_1: entered promiscuous mode
[   55.999478][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   56.001972][ T5856] Cannot create hsr debugfs directory
[   56.080511][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.093504][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.120135][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.143187][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.211866][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.219419][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.227443][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.245924][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.294940][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.311830][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.318134][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.326943][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.377610][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.406552][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.419674][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.422387][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.437688][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.441294][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.448482][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.468686][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.492108][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.494531][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.507823][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.510177][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.535711][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.572965][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   56.586224][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.588813][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.593967][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.596998][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.611060][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.682506][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.743615][ T5853] Bluetooth: hci0: command tx timeout
[   56.755415][ T5845] veth0_vlan: entered promiscuous mode
[   56.774370][ T5845] veth1_vlan: entered promiscuous mode
[   56.790952][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.820494][ T5853] Bluetooth: hci1: command tx timeout
[   56.840924][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.844130][ T5845] veth0_macvtap: entered promiscuous mode
[   56.854350][ T5845] veth1_macvtap: entered promiscuous mode
[   56.873674][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.891894][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.896915][ T5856] veth0_vlan: entered promiscuous mode
[   56.903379][ T5853] Bluetooth: hci2: command tx timeout
[   56.913634][ T5856] veth1_vlan: entered promiscuous mode
[   56.916432][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.922193][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.925904][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.929543][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.977977][ T5849] veth0_vlan: entered promiscuous mode
[   56.986211][ T5856] veth0_macvtap: entered promiscuous mode
[   57.005425][ T5849] veth1_vlan: entered promiscuous mode
[   57.010448][ T5856] veth1_macvtap: entered promiscuous mode
[   57.031068][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.041876][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.063208][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.066034][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.071659][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.076686][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.083991][ T5849] veth0_macvtap: entered promiscuous mode
[   57.089104][ T5849] veth1_macvtap: entered promiscuous mode
[   57.120388][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.123543][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.126814][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.134652][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.147307][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.191810][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.201806][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.204506][ T5910] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.222140][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.225954][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.242727][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.249447][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.252299][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.253116][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.321622][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.329218][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.353546][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.356717][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.390736][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.401795][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.404520][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.442805][ T5923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.446649][ T5923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.569028][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.583649][ T5932] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   57.665595][ T5942] batadv_slave_1: entered promiscuous mode
[   57.673220][ T5942] nbd: must specify a device to reconfigure
[   57.709479][ T5941] batadv_slave_1: left promiscuous mode
[   57.747502][ T5944] netlink: 'syz.2.12': attribute type 3 has an invalid length.
[   57.756872][ T5944] netlink: 'syz.2.12': attribute type 3 has an invalid length.
[   58.819804][ T5853] Bluetooth: hci0: command tx timeout
[   58.900120][ T5853] Bluetooth: hci1: command tx timeout
[   58.989888][ T5853] Bluetooth: hci2: command tx timeout
[   59.579598][ T6039] Bluetooth: MGMT ver 1.23
[   59.685433][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'.
[   59.817882][ T6055] openvswitch: netlink: IPv4 tun info is not correct
[   59.949259][ T6069] netlink: 360 bytes leftover after parsing attributes in process `syz.0.55'.
[   60.125283][ T6083] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   60.164204][ T6087] netlink: 'syz.0.62': attribute type 1 has an invalid length.
[   60.172466][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.306168][ T6097] tipc: Started in network mode
[   60.309202][ T6097] tipc: Node identity 46d218f8cad8, cluster identity 4711
[   60.315367][ T6097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.322174][ T6097] syzkaller0: entered promiscuous mode
[   60.326929][ T6097] syzkaller0: entered allmulticast mode
[   60.900434][ T5853] Bluetooth: hci0: command tx timeout
[   60.979921][ T5853] Bluetooth: hci1: command tx timeout
[   61.053242][ T6092] tipc: Resetting bearer <eth:syzkaller0>
[   61.069974][ T5853] Bluetooth: hci2: command tx timeout
[   61.092377][ T6092] tipc: Disabling bearer <eth:syzkaller0>
[   61.292033][ T6125] sctp: [Deprecated]: syz.0.73 (pid 6125) Use of int in max_burst socket option.
[   61.292033][ T6125] Use struct sctp_assoc_value instead
[   61.317083][ T6137] netlink: 'syz.2.76': attribute type 83 has an invalid length.
[   61.401854][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   61.405386][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   61.408921][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'.
[   61.441420][ T6146] netlink: 64 bytes leftover after parsing attributes in process `syz.2.79'.
[   61.488774][ T6146] Zero length message leads to an empty skb
[   62.067590][ T6152] ieee802154 phy0 wpan0: encryption failed: -22
[   62.209100][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'.
[   62.214793][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'.
[   62.483521][ T6187] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   62.488523][ T6187] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   62.550829][ T6191] __nla_validate_parse: 1 callbacks suppressed
[   62.550845][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'.
[   62.571768][ T6192] netlink: 'syz.1.94': attribute type 4 has an invalid length.
[   62.666227][ T6198] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   62.762959][ T6205] syz_tun: entered allmulticast mode
[   62.817951][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   62.916062][ T6220] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   62.957466][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'.
[   62.963306][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'.
[   62.980956][ T5853] Bluetooth: hci0: command tx timeout
[   62.984687][ T6224] IPVS: Scheduler module ip_vs_sip not found
[   63.060246][ T5853] Bluetooth: hci1: command tx timeout
[   63.139922][ T5853] Bluetooth: hci2: command tx timeout
[   63.503145][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   63.507758][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   63.564876][ T6263] netlink: 64 bytes leftover after parsing attributes in process `syz.2.117'.
[   63.638965][ T6265] Bluetooth: MGMT ver 1.23
[   63.840929][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[   63.843567][ T6282] openvswitch: netlink: IPv4 tun info is not correct
[   63.844834][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'.
[   63.948970][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[   64.152679][ T6300] netlink: 'syz.1.127': attribute type 11 has an invalid length.
[   64.312955][ T6320] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   64.394579][ T6312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   64.837166][ T6364] netlink: 'syz.2.149': attribute type 3 has an invalid length.
[   65.667579][ T6412] xt_time: invalid argument - start or stop time greater than 23:59:59
[   66.298896][ T6334] Set syz1 is full, maxelem 65536 reached
[   67.085873][ T6474] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   67.616942][ T6516] netlink: 'syz.1.189': attribute type 11 has an invalid length.
[   67.622389][ T6519] __nla_validate_parse: 11 callbacks suppressed
[   67.622399][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'.
[   67.716413][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'.
[   67.805367][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   67.815990][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[   68.107729][ T6547] vlan2: entered allmulticast mode
[   68.162662][ T6552] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   68.288639][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.317134][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.463949][ T6581] netlink: 'syz.2.209': attribute type 1 has an invalid length.
[   68.467324][ T6581] netlink: 'syz.2.209': attribute type 3 has an invalid length.
[   68.479761][ T6581] netlink: 224 bytes leftover after parsing attributes in process `syz.2.209'.
[   68.483616][ T6581] NCSI netlink: No device for ifindex 246
[   68.543109][ T6581] macvtap1: entered allmulticast mode
[   68.545111][ T6581] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   68.553461][ T6581] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   69.101907][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[   69.245040][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'.
[   69.655578][ T6627] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[   69.706497][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'.
[   69.844253][ T6636] gretap0: entered promiscuous mode
[   70.245092][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.248250][ T6652] sit0: entered promiscuous mode
[   70.254264][ T6652] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   70.257349][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.262265][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.265984][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.375250][ T6660] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   70.599486][ T6684] netlink: 'syz.2.243': attribute type 10 has an invalid length.
[   70.603501][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.606776][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.641549][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.644294][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.647407][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.650153][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.656994][ T6684] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   70.771857][ T6694] netlink: 'syz.0.245': attribute type 5 has an invalid length.
[   70.878120][ T6702] netlink: 'syz.2.248': attribute type 14 has an invalid length.
[   70.883667][ T6700] syzkaller1: entered promiscuous mode
[   70.885853][ T6700] syzkaller1: entered allmulticast mode
[   71.012409][ T6707] netlink: 'syz.0.251': attribute type 1 has an invalid length.
[   71.151020][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.153985][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.258962][ T6738] vlan3: entered promiscuous mode
[   71.262274][ T6738] vlan3: entered allmulticast mode
[   71.265371][ T6738] hsr_slave_1: entered allmulticast mode
[   71.437265][ T6749] vlan3: entered promiscuous mode
[   71.439593][ T6749] vlan3: entered allmulticast mode
[   71.443705][ T6749] hsr_slave_1: entered allmulticast mode
[   71.973018][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.975550][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.978313][ T6778] netlink: 'syz.0.273': attribute type 5 has an invalid length.
[   72.061618][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.071499][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.157406][  T793] cfg80211: failed to load regulatory.db
[   72.173656][ T6777] delete_channel: no stack
[   72.187923][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.202918][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.207353][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.221621][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.232450][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.240062][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.248260][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.253649][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.342678][ T6790] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   72.356232][ T6790] netlink: 'syz.0.277': attribute type 4 has an invalid length.
[   73.296746][ T6845] batadv0: entered promiscuous mode
[   73.306866][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.612052][ T6878] netlink: 'syz.0.309': attribute type 21 has an invalid length.
[   73.616471][ T6878] __nla_validate_parse: 17 callbacks suppressed
[   73.616478][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'.
[   73.626861][ T6878] pim6reg: entered allmulticast mode
[   73.630873][ T6878] pim6reg: left allmulticast mode
[   73.648822][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[   73.684955][ T6887] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004
[   73.771971][ T6895] bridge_slave_0: left allmulticast mode
[   73.773895][ T6895] bridge_slave_0: left promiscuous mode
[   73.776379][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.786103][ T6895] bridge_slave_1: left allmulticast mode
[   73.788885][ T6895] bridge_slave_1: left promiscuous mode
[   73.792788][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.809447][ T6895] bond0: (slave bond_slave_0): Releasing backup interface
[   73.815184][ T6895] bond0: (slave bond_slave_1): Releasing backup interface
[   73.825501][ T6895] team0: Port device team_slave_0 removed
[   73.832432][ T6895] team0: Port device team_slave_1 removed
[   73.835089][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.837411][ T6895] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.848238][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.854294][ T6895] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.901767][  T793] IPVS: starting estimator thread 0...
[   73.944090][ T6895] ieee802154 phy0 wpan0: encryption failed: -22
[   73.956442][ T6895] team0: Mode changed to "loadbalance"
[   73.999926][ T6906] IPVS: using max 47 ests per chain, 112800 per kthread
[   74.118908][ T6913] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.124383][ T6913] bond0: (slave bond1): Enslaving as an active interface with an up link
[   74.365167][ T6935] tipc: Started in network mode
[   74.367380][ T6935] tipc: Node identity 86ee542ec53d, cluster identity 4711
[   74.376057][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.383347][ T6935] syzkaller0: entered promiscuous mode
[   74.386024][ T6935] syzkaller0: entered allmulticast mode
[   74.413584][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   74.470169][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   74.492802][ T6934] tipc: Disabling bearer <eth:syzkaller0>
[   74.505381][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'.
[   74.614320][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'.
[   74.617246][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'.
[   74.739408][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   74.754627][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'.
[   74.759363][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   74.767652][ T6965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.773330][ T6963] netlink: 'syz.0.337': attribute type 3 has an invalid length.
[   75.184384][ T7010] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   75.287084][ T7026] vlan3: entered promiscuous mode
[   75.297015][ T7026] bridge0: entered promiscuous mode
[   75.337790][ T7032] vlan3: entered promiscuous mode
[   75.426508][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[   75.546009][ T7048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'.
[   76.468981][ T7067] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   76.474959][ T7067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.537782][ T7071] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[   76.893420][ T7117] dvmrp8: entered allmulticast mode
[   76.979773][ T7115] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   77.137545][ T7140] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   77.726336][ T7180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.748857][ T7180] syzkaller0: entered promiscuous mode
[   77.751878][ T7180] syzkaller0: entered allmulticast mode
[   77.771740][ T7177] tipc: Resetting bearer <eth:syzkaller0>
[   77.804344][ T7177] tipc: Disabling bearer <eth:syzkaller0>
[   77.886913][ T7187] IPVS: ovf: FWM 3 0x00000003 - no destination available
[   77.895829][ T5895] IPVS: starting estimator thread 0...
[   77.982436][ T7188] IPVS: using max 47 ests per chain, 112800 per kthread
[   78.202088][ T7201] netlink: 'syz.1.414': attribute type 7 has an invalid length.
[   78.204779][ T7201] netlink: 'syz.1.414': attribute type 8 has an invalid length.
[   78.212581][ T7201] syz_tun: entered promiscuous mode
[   78.238223][ T7201] syz_tun: left promiscuous mode
[   78.317715][ T7204] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.426443][ T7210] pimreg: entered allmulticast mode
[   78.579204][ T7223] IPVS: length: 184 != 8
[   78.633902][ T7231] __nla_validate_parse: 16 callbacks suppressed
[   78.633916][ T7231] netlink: 256 bytes leftover after parsing attributes in process `syz.2.425'.
[   78.816204][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.821322][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.824260][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.827942][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.831999][ T7252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.434'.
[   78.870624][ T7256] IPVS: set_ctl: invalid protocol: 1 172.20.20.63:20000
[   78.931452][ T7265] syzkaller0: entered promiscuous mode
[   78.933350][ T7265] syzkaller0: entered allmulticast mode
[   78.987871][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.442'.
[   78.993115][ T7271] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[   79.001094][ T7271] netlink: 'syz.2.442': attribute type 2 has an invalid length.
[   79.005880][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'.
[   79.027142][ T7275] net veth1_virt_wifi : renamed from virt_wifi0
[   79.280788][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'.
[   79.286375][ T7310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.424649][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[   79.599444][ T7348] syz.1.464: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   79.610417][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.1.464 Not tainted syzkaller #0 PREEMPT(full) 
[   79.610428][ T7348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.610433][ T7348] Call Trace:
[   79.610437][ T7348]  <TASK>
[   79.610441][ T7348]  dump_stack_lvl+0x189/0x250
[   79.610457][ T7348]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.610466][ T7348]  ? __pfx__printk+0x10/0x10
[   79.610477][ T7348]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.610488][ T7348]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.610497][ T7348]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   79.610507][ T7348]  warn_alloc+0x214/0x310
[   79.610520][ T7348]  ? stack_depot_save_flags+0x40/0x860
[   79.610530][ T7348]  ? __pfx_warn_alloc+0x10/0x10
[   79.610541][ T7348]  ? kasan_save_track+0x4f/0x80
[   79.610553][ T7348]  ? xskq_create+0x56/0x170
[   79.610563][ T7348]  ? xsk_init_queue+0xb0/0x110
[   79.610573][ T7348]  ? xsk_setsockopt+0x4dc/0x8d0
[   79.610582][ T7348]  ? do_sock_setsockopt+0x17c/0x1b0
[   79.610615][ T7348]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   79.610622][ T7348]  ? do_syscall_64+0xfa/0x3b0
[   79.610629][ T7348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.610640][ T7348]  __vmalloc_node_range_noprof+0x125/0x12f0
[   79.610664][ T7348]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   79.610679][ T7348]  ? __kasan_kmalloc+0x93/0xb0
[   79.610690][ T7348]  vmalloc_user_noprof+0xad/0xf0
[   79.610701][ T7348]  ? xskq_create+0xbf/0x170
[   79.610711][ T7348]  xskq_create+0xbf/0x170
[   79.610723][ T7348]  xsk_init_queue+0xb0/0x110
[   79.610733][ T7348]  xsk_setsockopt+0x4dc/0x8d0
[   79.610742][ T7348]  ? __pfx_xsk_setsockopt+0x10/0x10
[   79.610751][ T7348]  ? __pfx_aa_sk_perm+0x10/0x10
[   79.610762][ T7348]  ? aa_sock_opt_perm+0xff/0x1b0
[   79.610770][ T7348]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   79.610777][ T7348]  ? __pfx_xsk_setsockopt+0x10/0x10
[   79.610786][ T7348]  do_sock_setsockopt+0x17c/0x1b0
[   79.610794][ T7348]  __x64_sys_setsockopt+0x13f/0x1b0
[   79.610803][ T7348]  do_syscall_64+0xfa/0x3b0
[   79.610808][ T7348]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.610817][ T7348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.610823][ T7348]  ? exc_page_fault+0x9f/0xf0
[   79.610833][ T7348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.610839][ T7348] RIP: 0033:0x7fd15bf8ebe9
[   79.610846][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.610852][ T7348] RSP: 002b:00007fd15ce98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   79.610860][ T7348] RAX: ffffffffffffffda RBX: 00007fd15c1c5fa0 RCX: 00007fd15bf8ebe9
[   79.610865][ T7348] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   79.610869][ T7348] RBP: 00007fd15c011e19 R08: 0000000000000004 R09: 0000000000000000
[   79.610873][ T7348] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.610876][ T7348] R13: 00007fd15c1c6038 R14: 00007fd15c1c5fa0 R15: 00007fff275846a8
[   79.610887][ T7348]  </TASK>
[   79.610890][ T7348] Mem-Info:
[   79.712696][ T7353] netlink: 45 bytes leftover after parsing attributes in process `syz.1.464'.
[   79.723674][ T7348] active_anon:5362 inactive_anon:0 isolated_anon:0
[   79.723674][ T7348]  active_file:1391 inactive_file:38231 isolated_file:0
[   79.723674][ T7348]  unevictable:1768 dirty:516 writeback:0
[   79.723674][ T7348]  slab_reclaimable:9698 slab_unreclaimable:54127
[   79.723674][ T7348]  mapped:18436 shmem:2442 pagetables:915
[   79.723674][ T7348]  sec_pagetables:0 bounce:0
[   79.723674][ T7348]  kernel_misc_reclaimable:0
[   79.723674][ T7348]  free:295908 free_pcp:22801 free_cma:0
[   79.738863][ T7348] Node 0 active_anon:11852kB inactive_anon:0kB active_file:3908kB inactive_file:144740kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38232kB dirty:1668kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5604kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.749748][ T7348] Node 1 active_anon:9528kB inactive_anon:0kB active_file:1656kB inactive_file:8184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35512kB dirty:396kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6000kB pagetables:1424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.763280][ T7348] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.774148][ T7348] lowmem_reserve[]: 0 811 811 811 811
[   79.776090][ T7348] Node 0 DMA32 free:262128kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11920kB inactive_anon:0kB active_file:3908kB inactive_file:144740kB unevictable:3536kB writepending:1668kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:53180kB local_pcp:39344kB free_cma:0kB
[   79.787130][ T7348] lowmem_reserve[]: 0 0 0 0 0
[   79.789958][ T7348] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   79.803102][ T7348] lowmem_reserve[]: 0 0 854 854 854
[   79.805067][ T7348] Node 1 Normal free:447652kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9596kB inactive_anon:0kB active_file:1656kB inactive_file:8184kB unevictable:3536kB writepending:396kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38352kB local_pcp:20052kB free_cma:0kB
[   79.815486][ T7348] lowmem_reserve[]: 0 0 0 0 0
[   79.817297][ T7348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   79.823309][ T7348] Node 0 DMA32: 508*4kB (U) 84*8kB (UME) 6*16kB (UE) 336*32kB (UME) 80*64kB (UME) 16*128kB (UM) 9*256kB (UE) 1*512kB (U) 7*1024kB (UME) 3*2048kB (UM) 55*4096kB (UM) = 262128kB
[   79.830355][ T7348] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   79.836792][ T7348] Node 1 Normal: 107*4kB (UME) 475*8kB (UM) 266*16kB (UM) 25*32kB (UME) 81*64kB (UM) 64*128kB (UM) 16*256kB (UME) 6*512kB (UM) 6*1024kB (UME) 9*2048kB (UME) 96*4096kB (M) = 447620kB
[   79.847258][ T7348] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.851484][ T7348] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.858253][ T7348] 42064 total pagecache pages
[   79.872910][ T7348] 0 pages in swap cache
[   79.880869][ T7348] Free swap  = 124996kB
[   79.882232][ T7348] Total swap = 124996kB
[   79.883603][ T7348] 786301 pages RAM
[   79.884882][ T7348] 0 pages HighMem/MovableOnly
[   79.886494][ T7348] 241337 pages reserved
[   79.887878][ T7348] 0 pages cma reserved
[   80.631667][ T7427] tipc: Started in network mode
[   80.634998][ T7427] tipc: Node identity 7ac312abaccd, cluster identity 4711
[   80.637401][ T7427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.650497][ T7427] syzkaller0: entered promiscuous mode
[   80.652315][ T7427] syzkaller0: entered allmulticast mode
[   80.656998][ T7427] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.492'.
[   80.664286][ T7426] tipc: Resetting bearer <eth:syzkaller0>
[   80.676101][ T7426] tipc: Disabling bearer <eth:syzkaller0>
[   80.775305][ T7449] unsupported nla_type 52263
[   80.823879][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'.
[   80.824515][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'.
[   80.891259][ T7462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.894261][ T7462] syzkaller0: entered promiscuous mode
[   80.896064][ T7462] syzkaller0: entered allmulticast mode
[   80.915739][ T7462] tipc: Resetting bearer <eth:syzkaller0>
[   80.927996][ T7462] tipc: Resetting bearer <eth:syzkaller0>
[   80.936663][ T7462] tipc: Disabling bearer <eth:syzkaller0>
[   81.718229][ T7586] vcan0: tx drop: invalid da for name 0x0000000000000003
[   81.951790][ T7622] delete_channel: no stack
[   82.129201][ T7644] openvswitch: netlink: IP tunnel dst address not specified
[   82.243083][ T7660] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   82.408740][ T7677] netlink: 'syz.1.586': attribute type 12 has an invalid length.
[   83.616162][ T7763] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.619202][ T7764] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.703832][ T7773] __nla_validate_parse: 14 callbacks suppressed
[   83.703845][ T7773] netlink: 260 bytes leftover after parsing attributes in process `syz.2.618'.
[   83.710894][ T7773] netlink: 260 bytes leftover after parsing attributes in process `syz.2.618'.
[   84.139586][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'.
[   84.238969][ T7785] ieee802154 phy0 wpan0: encryption failed: -22
[   84.297616][ T7787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.375231][ T7787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.422949][ T7787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.496460][ T7787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.565147][ T5708] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.577632][ T5708] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.592856][ T5708] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.596007][ T5708] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.738448][ T7800] bridge_slave_0: left allmulticast mode
[   84.740882][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.746028][ T7800] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   84.787379][ T7810] netlink: 'syz.1.632': attribute type 10 has an invalid length.
[   84.798008][ T7810] team0: Port device macvlan1 added
[   84.905478][   T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[   85.127186][ T7823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.636'.
[   85.146674][ T7823] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[   85.152699][ T7823] netlink: 180 bytes leftover after parsing attributes in process `syz.1.636'.
[   85.156971][ T7823] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[   85.159529][ T7823] netlink: 'syz.1.636': attribute type 2 has an invalid length.
[   85.262793][ T7832] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'.
[   85.370355][ T7837] netlink: 64 bytes leftover after parsing attributes in process `syz.1.642'.
[   85.723090][ T7871] netlink: 64 bytes leftover after parsing attributes in process `syz.2.649'.
[   85.747325][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'.
[   85.775328][ T7873] netlink: 'syz.1.653': attribute type 10 has an invalid length.
[   85.778186][ T7873] bond0: (slave wlan1): Opening slave failed
[   85.853092][ T7887] netlink: 'syz.2.656': attribute type 1 has an invalid length.
[   85.887358][ T7887] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.908581][ T7887] bond1: (slave gretap1): making interface the new active one
[   85.914253][ T7887] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   86.077036][ T7909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.660'.
[   86.579390][ T7966] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.705213][ T7964] tipc: Disabling bearer <eth:syzkaller0>
[   87.001886][ T8008] netlink: 'syz.0.691': attribute type 1 has an invalid length.
[   87.010542][ T8008] netlink: 'syz.0.691': attribute type 2 has an invalid length.
[   87.054492][ T8020] vlan4: entered promiscuous mode
[   87.056269][ T8020] macvtap0: entered promiscuous mode
[   87.068699][ T8022] netlink: 'syz.2.694': attribute type 3 has an invalid length.
[   87.158222][ T8029] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.151494][ T8072] validate_nla: 1 callbacks suppressed
[   88.151505][ T8072] netlink: 'syz.2.712': attribute type 13 has an invalid length.
[   88.155758][ T8072] netlink: 'syz.2.712': attribute type 17 has an invalid length.
[   88.269527][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.276020][ T8072] 8021q: adding VLAN 0 to HW filter on device team0
[   88.287344][ T8072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.398619][ T8072] syz.2.712 (8072) used greatest stack depth: 19512 bytes left
[   88.477308][ T8088] ip6tnl2: entered promiscuous mode
[   88.622586][ T8104] bond0: (slave bond1): Error -95 calling ndo_bpf
[   88.631367][ T8104] netlink: 'syz.0.724': attribute type 13 has an invalid length.
[   88.634485][ T8104] netlink: 'syz.0.724': attribute type 17 has an invalid length.
[   88.665218][ T8104] sit0: left promiscuous mode
[   88.698284][ T8104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.713254][ T8109] __nla_validate_parse: 9 callbacks suppressed
[   88.713263][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'.
[   88.725414][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'.
[   88.736688][ T8108] ipvlan2: entered promiscuous mode
[   88.741710][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'.
[   88.932021][ T8125] bridge0: port 1(syz_tun) entered blocking state
[   88.934794][ T8125] bridge0: port 1(syz_tun) entered disabled state
[   88.937507][ T8125] syz_tun: entered allmulticast mode
[   88.953302][ T8125] syz_tun: entered promiscuous mode
[   88.955934][ T8125] bridge0: port 1(syz_tun) entered blocking state
[   88.958607][ T8125] bridge0: port 1(syz_tun) entered forwarding state
[   89.002111][ T8125] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001
[   89.013288][ T8133] batadv1: entered promiscuous mode
[   89.015048][ T8133] batadv1: entered allmulticast mode
[   89.109133][ T8136] syzkaller1: entered promiscuous mode
[   89.111144][ T8136] syzkaller1: entered allmulticast mode
[   89.231791][ T8135] block nbd1: server does not support multiple connections per device.
[   89.238704][ T8135] block nbd1: shutting down sockets
[   89.511681][ T8172] netlink: 'syz.2.744': attribute type 27 has an invalid length.
[   89.563208][ T8174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.745'.
[   89.567191][ T8174] unsupported nlmsg_type 40
[   89.941184][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'.
[   89.976655][ T8217] netlink: 276 bytes leftover after parsing attributes in process `syz.0.758'.
[   89.984314][ T8217] openvswitch: netlink: Multiple metadata blocks provided
[   90.013722][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.761'.
[   90.016241][ T8225] netlink: 71 bytes leftover after parsing attributes in process `syz.1.757'.
[   90.918647][ T8301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.963203][ T8316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.787'.
[   90.963924][ T8317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.787'.
[   92.019754][ T5853] Bluetooth: hci2: command tx timeout
[   92.150879][ T8396] bridge0: port 2(bridge_slave_1) entered listening state
[   92.158490][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.379097][ T8420] TC_ACT_REPEAT abuse ?
[   92.382028][    C0] TC_ACT_REPEAT abuse ?
[   92.387144][ T8420] TC_ACT_REPEAT abuse ?
[   92.391819][ T5708] TC_ACT_REPEAT abuse ?
[   92.409907][    C0] TC_ACT_REPEAT abuse ?
[   93.057877][ T8409] TC_ACT_REPEAT abuse ?
[   93.061398][    C0] TC_ACT_REPEAT abuse ?
[   93.405821][ T8509] IPVS: Unknown mcast interface: pim6reg0
[   93.437750][ T5895] IPVS: starting estimator thread 0...
[   93.446034][ T8526] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   93.450921][ T8526] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   93.455296][ T8526] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   93.530258][ T8527] IPVS: using max 82 ests per chain, 196800 per kthread
[   93.632106][ T8548] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.636556][ T8548] bond0: (slave bond2): Enslaving as an active interface with an up link
[   93.798306][ T8564] __nla_validate_parse: 14 callbacks suppressed
[   93.798319][ T8564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.868'.
[   93.856179][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'.
[   93.909621][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.873'.
[   93.920584][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[   93.926927][ T8583] netlink: 'syz.0.874': attribute type 2 has an invalid length.
[   93.936988][ T8583] netlink: 'syz.0.874': attribute type 11 has an invalid length.
[   94.982057][ T8631] netlink: 256 bytes leftover after parsing attributes in process `syz.2.888'.
[   94.985053][ T8631] netlink: 48 bytes leftover after parsing attributes in process `syz.2.888'.
[   94.988046][ T8631] pimreg: left allmulticast mode
[   95.051348][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'.
[   95.056116][ T8638] lo speed is unknown, defaulting to 1000
[   95.064854][ T8638] lo speed is unknown, defaulting to 1000
[   95.071892][ T8638] lo speed is unknown, defaulting to 1000
[   95.132093][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'.
[   95.179592][ T8638] infiniband syz0: set active
[   95.184146][ T8638] infiniband syz0: added lo
[   95.204818][ T8638] RDS/IB: syz0: added
[   95.206486][ T8638] smc: adding ib device syz0 with port count 1
[   95.208534][ T8638] smc:    ib device syz0 port 1 has pnetid 
[   95.214880][ T8631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.221669][  T792] lo speed is unknown, defaulting to 1000
[   95.226474][    T9] lo speed is unknown, defaulting to 1000
[   95.229433][ T5850] lo speed is unknown, defaulting to 1000
[   95.232546][ T8638] lo speed is unknown, defaulting to 1000
[   95.363645][ T8638] lo speed is unknown, defaulting to 1000
[   95.531852][ T8638] lo speed is unknown, defaulting to 1000
[   95.808261][ T8670] ip6gre1: entered allmulticast mode
[   95.815241][ T8670] batadv_slave_0: entered promiscuous mode
[   95.817329][ T8670] netlink: 'syz.2.900': attribute type 3 has an invalid length.
[   95.927458][ T8680] netlink: 'syz.2.905': attribute type 1 has an invalid length.
[   95.942819][ T8680] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.962735][ T8680] vlan3: entered promiscuous mode
[   95.965634][ T8680] bond3: entered promiscuous mode
[   95.967947][ T8680] vlan3: entered allmulticast mode
[   95.971895][ T8680] bond3: entered allmulticast mode
[   96.033951][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[   96.037683][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[   96.486739][ T8735] vti0: entered promiscuous mode
[   96.740369][ T5850] TC_ACT_REPEAT abuse ?
[   96.981677][ T8803] netlink: zone id is out of range
[   96.985823][ T8803] netlink: zone id is out of range
[   96.987705][ T8803] netlink: zone id is out of range
[   96.990224][ T8803] netlink: zone id is out of range
[   96.992852][ T8803] netlink: zone id is out of range
[   96.994971][ T8803] netlink: zone id is out of range
[   97.001067][ T8803] netlink: zone id is out of range
[   97.003100][ T8803] netlink: zone id is out of range
[   97.726629][ T8862] netlink: 'syz.1.962': attribute type 5 has an invalid length.
[   97.963991][ T8887] lo speed is unknown, defaulting to 1000
[   98.791161][ T8935] dvmrp0: entered allmulticast mode
[   99.039012][ T8972] __nla_validate_parse: 23 callbacks suppressed
[   99.039028][ T8972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.996'.
[   99.226770][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[   99.333845][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[   99.341961][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'.
[   99.363953][ T9018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1012'.
[   99.366802][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[   99.417906][ T9030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1014'.
[   99.420493][ T9033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1008'.
[   99.534080][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'.
[   99.537921][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'.
[  100.091086][ T9084] syzkaller1: entered promiscuous mode
[  100.093448][ T9084] syzkaller1: entered allmulticast mode
[  100.265023][ T9103] lo speed is unknown, defaulting to 1000
[  100.398410][ T9118] gre3: entered allmulticast mode
[  100.568000][ T9129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.571735][ T9129] syzkaller0: entered promiscuous mode
[  100.573570][ T9129] syzkaller0: entered allmulticast mode
[  100.584571][ T9129] tipc: Resetting bearer <eth:syzkaller0>
[  100.587460][ T9128] tipc: Resetting bearer <eth:syzkaller0>
[  100.601377][ T9128] tipc: Disabling bearer <eth:syzkaller0>
[  101.246638][ T9171] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20002
[  101.927443][ T9245] netlink: 'syz.2.1076': attribute type 7 has an invalid length.
[  101.930244][ T9245] netlink: 'syz.2.1076': attribute type 8 has an invalid length.
[  102.051988][ T9258] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.136123][ T9265] netlink: 'syz.0.1082': attribute type 12 has an invalid length.
[  102.270688][ T9282] macvlan2: entered promiscuous mode
[  102.272437][ T9282] vlan0: entered promiscuous mode
[  102.285399][ T9282] vcan0: Master is either lo or non-ether device
[  102.603684][ T9308] pim6reg1: entered promiscuous mode
[  102.605597][ T9308] pim6reg1: entered allmulticast mode
[  102.885646][ T9324] netlink: 'syz.0.1098': attribute type 13 has an invalid length.
[  102.888884][ T9324] netlink: 'syz.0.1098': attribute type 17 has an invalid length.
[  102.903748][ T9324] net_ratelimit: 19 callbacks suppressed
[  102.903754][ T9324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.941125][ T9319] lo speed is unknown, defaulting to 1000
[  102.990113][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.995197][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.433718][ T9350] IPVS: Error connecting to the multicast addr
[  103.655334][ T9368] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  103.657900][ T9368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.808469][ T9383] af_packet: tpacket_rcv: packet too big, clamped from 212 to 4294967272. macoff=96
[  104.026434][ T9400] netlink: 'syz.0.1130': attribute type 12 has an invalid length.
[  104.138257][ T9411] __nla_validate_parse: 14 callbacks suppressed
[  104.138271][ T9411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1133'.
[  104.164129][ T9411] netlink: 'syz.2.1133': attribute type 10 has an invalid length.
[  104.183464][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'.
[  104.194364][ T9411] bridge_slave_1: left allmulticast mode
[  104.196348][ T9411] bridge_slave_1: left promiscuous mode
[  104.198294][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.202887][ T9411] bridge_slave_0: left promiscuous mode
[  104.205087][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.216612][ T9411] bond0: (slave bridge0): Releasing backup interface
[  104.236554][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1133'.
[  104.336535][ T9417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.339225][ T9417] syzkaller0: entered promiscuous mode
[  104.342456][ T9417] syzkaller0: entered allmulticast mode
[  104.353629][ T9417] tipc: Resetting bearer <eth:syzkaller0>
[  104.364601][ T9417] tipc: Disabling bearer <eth:syzkaller0>
[  104.476514][ T9433] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  104.573939][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  104.717064][ T9465] lo speed is unknown, defaulting to 1000
[  104.742828][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'.
[  104.745944][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'.
[  104.913555][ T9483] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1157'.
[  105.160394][ T9503] netlink: 'syz.1.1162': attribute type 13 has an invalid length.
[  105.162959][ T9503] netlink: 'syz.1.1162': attribute type 17 has an invalid length.
[  105.169613][ T9503] gretap0: left promiscuous mode
[  105.195442][ T9503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.208571][ T9503] xfrm0: entered promiscuous mode
[  105.210841][ T9503] xfrm0: entered allmulticast mode
[  105.236646][ T9503] lo speed is unknown, defaulting to 1000
[  105.247708][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1169'.
[  105.265896][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'.
[  105.285456][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.371164][ T9521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.373826][ T9521] syzkaller0: entered promiscuous mode
[  105.375925][ T9521] syzkaller0: entered allmulticast mode
[  105.397813][ T9523] tipc: Resetting bearer <eth:syzkaller0>
[  105.407146][ T9523] tipc: Disabling bearer <eth:syzkaller0>
[  105.952658][ T9529] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1173'.
[  106.095481][ T9536] geneve2: entered promiscuous mode
[  106.097240][ T9536] geneve2: entered allmulticast mode
[  106.357865][ T9557] sctp: [Deprecated]: syz.2.1185 (pid 9557) Use of int in maxseg socket option.
[  106.357865][ T9557] Use struct sctp_assoc_value instead
[  106.676653][ T9592] lo speed is unknown, defaulting to 1000
[  106.945883][ T9592] netlink: 'syz.2.1198': attribute type 13 has an invalid length.
[  106.953507][ T9592] netlink: 'syz.2.1198': attribute type 17 has an invalid length.
[  106.965940][ T9592] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  107.141646][ T9630] lo: entered allmulticast mode
[  107.145525][ T9630] lo: left allmulticast mode
[  107.153433][ T9630] netlink: zone id is out of range
[  107.156408][ T9630] netlink: zone id is out of range
[  107.172154][ T9630] netlink: zone id is out of range
[  107.174546][ T9630] netlink: zone id is out of range
[  107.176740][ T9630] netlink: get zone limit has 8 unknown bytes
[  107.582310][ T9674] syz.0.1223 (9674) used greatest stack depth: 18808 bytes left
[  107.652499][ T9678] syzkaller1: entered promiscuous mode
[  107.655924][ T9678] syzkaller1: entered allmulticast mode
[  109.005606][ T5853] Bluetooth: hci2: link tx timeout
[  109.007628][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.103590][ T9742] nbd: illegal input index -1
[  109.155094][ T9747] __nla_validate_parse: 18 callbacks suppressed
[  109.155110][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'.
[  109.362278][ T9759] ==================================================================
[  109.365742][ T9759] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  109.369110][ T9759] Read of size 1 at addr ffff88802920e2b0 by task syz.0.1250/9759
[  109.372649][ T9759] 
[  109.373421][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.0.1250 Not tainted syzkaller #0 PREEMPT(full) 
[  109.373431][ T9759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.373436][ T9759] Call Trace:
[  109.373440][ T9759]  <TASK>
[  109.373444][ T9759]  dump_stack_lvl+0x189/0x250
[  109.373456][ T9759]  ? __kasan_check_byte+0x12/0x40
[  109.373468][ T9759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.373475][ T9759]  ? lock_release+0x4b/0x3e0
[  109.373486][ T9759]  ? __virt_addr_valid+0x4a5/0x5c0
[  109.373496][ T9759]  print_report+0xca/0x240
[  109.373503][ T9759]  ? xfrm_state_find+0x2cf2/0x5400
[  109.373511][ T9759]  kasan_report+0x118/0x150
[  109.373520][ T9759]  ? xfrm_state_find+0x2cf2/0x5400
[  109.373527][ T9759]  xfrm_state_find+0x2cf2/0x5400
[  109.373534][ T9759]  ? __lock_acquire+0xab9/0xd20
[  109.373546][ T9759]  ? xfrm_state_find+0x1da/0x5400
[  109.373553][ T9759]  ? __pfx_xfrm_state_find+0x10/0x10
[  109.373562][ T9759]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  109.373582][ T9759]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  109.373591][ T9759]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  109.373599][ T9759]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  109.373608][ T9759]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  109.373622][ T9759]  ? xfrm_expand_policies+0x41f/0x6a0
[  109.373630][ T9759]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  109.373640][ T9759]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  109.373648][ T9759]  ? irqentry_exit+0x74/0x90
[  109.373658][ T9759]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.373668][ T9759]  xfrm_lookup_route+0x3c/0x1c0
[  109.373676][ T9759]  __ip4_datagram_connect+0x9a5/0x1270
[  109.373688][ T9759]  udp_connect+0x33/0x1f0
[  109.373696][ T9759]  __sys_connect+0x316/0x440
[  109.373708][ T9759]  ? __pfx___sys_connect+0x10/0x10
[  109.373719][ T9759]  ? rcu_is_watching+0x15/0xb0
[  109.373728][ T9759]  __x64_sys_connect+0x7a/0x90
[  109.373733][ T9759]  do_syscall_64+0xfa/0x3b0
[  109.373739][ T9759]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.373748][ T9759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.373754][ T9759]  ? exc_page_fault+0x9f/0xf0
[  109.373763][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.373769][ T9759] RIP: 0033:0x7fd7e6d8ebe9
[  109.373777][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.373783][ T9759] RSP: 002b:00007fd7e7b2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  109.373791][ T9759] RAX: ffffffffffffffda RBX: 00007fd7e6fc6180 RCX: 00007fd7e6d8ebe9
[  109.373796][ T9759] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005
[  109.373800][ T9759] RBP: 00007fd7e6e11e19 R08: 0000000000000000 R09: 0000000000000000
[  109.373804][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.373808][ T9759] R13: 00007fd7e6fc6218 R14: 00007fd7e6fc6180 R15: 00007ffe9d64fc48
[  109.373816][ T9759]  </TASK>
[  109.373818][ T9759] 
[  109.485539][ T9759] Allocated by task 7010:
[  109.487422][ T9759]  kasan_save_track+0x3e/0x80
[  109.489480][ T9759]  __kasan_slab_alloc+0x6c/0x80
[  109.491621][ T9759]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  109.493990][ T9759]  xfrm_state_alloc+0x24/0x2f0
[  109.496093][ T9759]  __find_acq_core+0x8a7/0x1c00
[  109.498216][ T9759]  xfrm_find_acq+0x78/0xa0
[  109.500137][ T9759]  xfrm_alloc_userspi+0x6b3/0xc90
[  109.502292][ T9759]  xfrm_user_rcv_msg+0x7a3/0xab0
[  109.504388][ T9759]  netlink_rcv_skb+0x208/0x470
[  109.506449][ T9759]  xfrm_netlink_rcv+0x79/0x90
[  109.508408][ T9759]  netlink_unicast+0x82f/0x9e0
[  109.510500][ T9759]  netlink_sendmsg+0x805/0xb30
[  109.512587][ T9759]  __sock_sendmsg+0x21c/0x270
[  109.514610][ T9759]  ____sys_sendmsg+0x505/0x830
[  109.516606][ T9759]  ___sys_sendmsg+0x21f/0x2a0
[  109.518628][ T9759]  __x64_sys_sendmsg+0x19b/0x260
[  109.520697][ T9759]  do_syscall_64+0xfa/0x3b0
[  109.522594][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.525115][ T9759] 
[  109.526141][ T9759] Freed by task 793:
[  109.527823][ T9759]  kasan_save_track+0x3e/0x80
[  109.529877][ T9759]  kasan_save_free_info+0x46/0x50
[  109.532087][ T9759]  __kasan_slab_free+0x5b/0x80
[  109.534152][ T9759]  kmem_cache_free+0x18f/0x400
[  109.536213][ T9759]  xfrm_state_gc_task+0x52d/0x6b0
[  109.538391][ T9759]  process_scheduled_works+0xae1/0x17b0
[  109.540823][ T9759]  worker_thread+0x8a0/0xda0
[  109.542841][ T9759]  kthread+0x711/0x8a0
[  109.544627][ T9759]  ret_from_fork+0x3fc/0x770
[  109.546659][ T9759]  ret_from_fork_asm+0x1a/0x30
[  109.548759][ T9759] 
[  109.549823][ T9759] The buggy address belongs to the object at ffff88802920df80
[  109.549823][ T9759]  which belongs to the cache xfrm_state of size 928
[  109.555683][ T9759] The buggy address is located 816 bytes inside of
[  109.555683][ T9759]  freed 928-byte region [ffff88802920df80, ffff88802920e320)
[  109.561407][ T9759] 
[  109.562467][ T9759] The buggy address belongs to the physical page:
[  109.565100][ T9759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802920db00 pfn:0x2920c
[  109.569363][ T9759] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  109.572933][ T9759] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  109.576019][ T9759] page_type: f5(slab)
[  109.577739][ T9759] raw: 00fff00000000040 ffff88801af32780 dead000000000122 0000000000000000
[  109.581062][ T9759] raw: ffff88802920db00 00000000800e0005 00000000f5000000 0000000000000000
[  109.584693][ T9759] head: 00fff00000000040 ffff88801af32780 dead000000000122 0000000000000000
[  109.588361][ T9759] head: ffff88802920db00 00000000800e0005 00000000f5000000 0000000000000000
[  109.592065][ T9759] head: 00fff00000000002 ffffea0000a48301 00000000ffffffff 00000000ffffffff
[  109.595746][ T9759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  109.599373][ T9759] page dumped because: kasan: bad access detected
[  109.602132][ T9759] page_owner tracks the page as allocated
[  109.604593][ T9759] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6263, tgid 6262 (syz.2.117), ts 63554581728, free_ts 57107306276
[  109.612584][ T9759]  post_alloc_hook+0x240/0x2a0
[  109.614668][ T9759]  get_page_from_freelist+0x21e4/0x22c0
[  109.616985][ T9759]  __alloc_frozen_pages_noprof+0x181/0x370
[  109.619513][ T9759]  alloc_pages_mpol+0x232/0x4a0
[  109.621644][ T9759]  allocate_slab+0x8a/0x370
[  109.623624][ T9759]  ___slab_alloc+0xbeb/0x1410
[  109.625669][ T9759]  kmem_cache_alloc_noprof+0x283/0x3c0
[  109.627966][ T9759]  xfrm_state_alloc+0x24/0x2f0
[  109.630060][ T9759]  xfrm_add_sa+0x17d1/0x4070
[  109.632089][ T9759]  xfrm_user_rcv_msg+0x7a3/0xab0
[  109.634255][ T9759]  netlink_rcv_skb+0x208/0x470
[  109.636364][ T9759]  xfrm_netlink_rcv+0x79/0x90
[  109.638371][ T9759]  netlink_unicast+0x82f/0x9e0
[  109.640468][ T9759]  netlink_sendmsg+0x805/0xb30
[  109.642519][ T9759]  __sock_sendmsg+0x21c/0x270
[  109.644539][ T9759]  ____sys_sendmsg+0x505/0x830
[  109.646643][ T9759] page last free pid 26 tgid 26 stack trace:
[  109.649269][ T9759]  __free_frozen_pages+0xbc4/0xd30
[  109.651494][ T9759]  __slab_free+0x303/0x3c0
[  109.653417][ T9759]  qlist_free_all+0x97/0x140
[  109.655359][ T9759]  kasan_quarantine_reduce+0x148/0x160
[  109.657556][ T9759]  __kasan_slab_alloc+0x22/0x80
[  109.659574][ T9759]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  109.661885][ T9759]  __alloc_skb+0x112/0x2d0
[  109.663550][ T9759]  rtmsg_ifinfo_build_skb+0x84/0x260
[  109.665769][ T9759]  rtmsg_ifinfo+0x8c/0x1a0
[  109.667662][ T9759]  netif_state_change+0x29e/0x3a0
[  109.669793][ T9759]  linkwatch_do_dev+0x117/0x170
[  109.671498][ T9759]  __linkwatch_run_queue+0x56a/0x7e0
[  109.673753][ T9759]  linkwatch_event+0x4c/0x60
[  109.675766][ T9759]  process_scheduled_works+0xae1/0x17b0
[  109.678007][ T9759]  worker_thread+0x8a0/0xda0
[  109.679998][ T9759]  kthread+0x711/0x8a0
[  109.681779][ T9759] 
[  109.682834][ T9759] Memory state around the buggy address:
[  109.685223][ T9759]  ffff88802920e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.688470][ T9759]  ffff88802920e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.691760][ T9759] >ffff88802920e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.695113][ T9759]                                      ^
[  109.697483][ T9759]  ffff88802920e300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  109.700836][ T9759]  ffff88802920e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  109.704117][ T9759] ==================================================================
[  109.710539][ T9759] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  109.713817][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.0.1250 Not tainted syzkaller #0 PREEMPT(full) 
[  109.717757][ T9759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.722086][ T9759] Call Trace:
[  109.723532][ T9759]  <TASK>
[  109.724830][ T9759]  dump_stack_lvl+0x99/0x250
[  109.726853][ T9759]  ? __asan_memcpy+0x40/0x70
[  109.728874][ T9759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.730807][ T9759]  ? __pfx__printk+0x10/0x10
[  109.732392][ T9759]  vpanic+0x281/0x750
[  109.733724][ T9759]  ? preempt_schedule+0xae/0xc0
[  109.735350][ T9759]  ? __pfx_vpanic+0x10/0x10
[  109.736837][ T9759]  ? preempt_schedule_common+0x83/0xd0
[  109.738678][ T9759]  ? preempt_schedule+0xae/0xc0
[  109.740308][ T9759]  ? __pfx_preempt_schedule+0x10/0x10
[  109.742139][ T9759]  panic+0xb9/0xc0
[  109.743400][ T9759]  ? __pfx_panic+0x10/0x10
[  109.744881][ T9759]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  109.746780][ T9759]  ? xfrm_state_find+0x2cf2/0x5400
[  109.748485][ T9759]  check_panic_on_warn+0x89/0xb0
[  109.750400][ T9759]  ? xfrm_state_find+0x2cf2/0x5400
[  109.752270][ T9759]  end_report+0x78/0x160
[  109.753897][ T9759]  kasan_report+0x129/0x150
[  109.755652][ T9759]  ? xfrm_state_find+0x2cf2/0x5400
[  109.757700][ T9759]  xfrm_state_find+0x2cf2/0x5400
[  109.759450][ T9759]  ? __lock_acquire+0xab9/0xd20
[  109.761074][ T9759]  ? xfrm_state_find+0x1da/0x5400
[  109.762730][ T9759]  ? __pfx_xfrm_state_find+0x10/0x10
[  109.764470][ T9759]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  109.766455][ T9759]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  109.768411][ T9759]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  109.770953][ T9759]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  109.773173][ T9759]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  109.775181][ T9759]  ? xfrm_expand_policies+0x41f/0x6a0
[  109.776958][ T9759]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  109.778716][ T9759]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  109.780826][ T9759]  ? irqentry_exit+0x74/0x90
[  109.782354][ T9759]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.784237][ T9759]  xfrm_lookup_route+0x3c/0x1c0
[  109.785857][ T9759]  __ip4_datagram_connect+0x9a5/0x1270
[  109.787678][ T9759]  udp_connect+0x33/0x1f0
[  109.789056][ T9759]  __sys_connect+0x316/0x440
[  109.790880][ T9759]  ? __pfx___sys_connect+0x10/0x10
[  109.792589][ T9759]  ? rcu_is_watching+0x15/0xb0
[  109.794174][ T9759]  __x64_sys_connect+0x7a/0x90
[  109.795733][ T9759]  do_syscall_64+0xfa/0x3b0
[  109.797248][ T9759]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.798905][ T9759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.800917][ T9759]  ? exc_page_fault+0x9f/0xf0
[  109.802497][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.804453][ T9759] RIP: 0033:0x7fd7e6d8ebe9
[  109.805915][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.812261][ T9759] RSP: 002b:00007fd7e7b2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  109.814974][ T9759] RAX: ffffffffffffffda RBX: 00007fd7e6fc6180 RCX: 00007fd7e6d8ebe9
[  109.817712][ T9759] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005
[  109.820370][ T9759] RBP: 00007fd7e6e11e19 R08: 0000000000000000 R09: 0000000000000000
[  109.823316][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.825922][ T9759] R13: 00007fd7e6fc6218 R14: 00007fd7e6fc6180 R15: 00007ffe9d64fc48
[  109.828529][ T9759]  </TASK>
[  109.830376][ T9759] Kernel Offset: disabled
[  109.832190][ T9759] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:25:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000312ee10
R8 =ffff88801ffa0237 R9 =1ffff11003ff4046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8f0 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd7e7b2c6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd7e7b2bfc8 CR3=000000011e42e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd7e6f97498 00007fd7e6f97470 XMM03=00007fd7e6f974a8 00007fd7e6f974a0
XMM04=00007fd7e7afd100 00007fd7e6f97460 XMM05=00007fd7e6f97478 00007fd7e6f974c0
XMM06=00007fd7e6f974b8 00007fd7e6f974b0 XMM07=00007fd7e6f974a8 00007fd7e6f974a0
XMM08=0000000000000000 00007fd7e6e12ee7 XMM09=0000000000000000 00007fd7e6e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=43290cd36edb9400 RBX=ffffffff819683c8 RCX=43290cd36edb9400 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000001ed9a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fbd3f612e53
XMM06=0000000000000000 00007fbd3f612e4d XMM07=0000000000000000 00007fbd3f612e61
XMM08=0000000000000000 00007fbd3f612ee7 XMM09=0000000000000000 00007fbd3f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
