last executing test programs:

2.278581044s ago: executing program 0 (id=993):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000a0000004200000040000000cc000000", @ANYRES32, @ANYBLOB="0100000000000000000000000000000006000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00'], 0x50)

2.270031951s ago: executing program 0 (id=995):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000000100007a9c79e100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={'nr0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000b000000000c2d6c696e6b00"/42], 0x28}}, 0x0) (async, rerun: 32)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={<r7=>0x0, 0x7}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={r7, 0x7}, 0x8) (async)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r11 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040) (async)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'}) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) (async, rerun: 32)
r13 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r14 = socket(0x2, 0x80805, 0x0)
r15 = accept4$tipc(r14, &(0x7f0000000240)=@name, &(0x7f0000000280)=0x10, 0x100000)
setsockopt$TIPC_SRC_DROPPABLE(r15, 0x10f, 0x80, &(0x7f00000002c0), 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x57)
connect$vsock_stream(r13, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

1.200578219s ago: executing program 0 (id=1005):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10)
listen(0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0xfff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0xfffff3c6)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a0100000000fffe008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

1.20014307s ago: executing program 2 (id=1006):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r0 = socket$inet6_sctp(0xa, 0x4, 0x84)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r3, 0x0, 0x0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000c00)=""/228, &(0x7f0000000040)=0xe4)
sendto$packet(r2, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x260, 0x110, 0x260, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "9138"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0xfffffffffffffff9}}}}, {{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xff000000], 'ip6tnl0\x00', 'pimreg0\x00', {}, {}, 0x4, 0xf0, 0x4, 0x27}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x5, 0x3}, {{0xc4b}, 0x7}, {{0x8}, 0x9}, 0x9}}, @common=@ah={{0x30}, {[0x4d3, 0x4d6], 0x1, 0x5, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xff], 'dvmrp1\x00', 'wlan0\x00', {}, {}, 0x8, 0x1, 0x2, 0x12}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x2, 0xffffffff], 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00', @loopback, @private2, @private2, @ipv4={'\x00', '\xff\xff', @local}, @remote, @empty, @mcast2, @remote, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1.106991223s ago: executing program 0 (id=1008):
socket(0x400000000010, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x25}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
shutdown(r1, 0x1)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

1.105915494s ago: executing program 2 (id=1009):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x105900, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0xf, 0xdd, 0x3, 0x8}, {0x4, 0xff, 0x18, 0x8001}, {0x6, 0xec, 0x1, 0x5}, {0xff, 0xd, 0x18, 0x8}, {0x9, 0x6, 0xf9, 0x5}, {0x3, 0x10, 0x1, 0xc74}, {0x859, 0x2, 0x8, 0xed4}, {0x2, 0x8, 0x3, 0x53b}]})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x22020600)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x7, &(0x7f0000000000), 0xa0)
sendmmsg(r1, &(0x7f00000026c0)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000140)="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", 0xbc0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000024c0)="8822715a58f2ee2a129a8ff3ab711fb9c98c0b78bbf56341cf50a103983ca977d25f39fd3c7e1cccf368396fbc9e187eed9d9504ebcdbea150cb98050194954a91ead83ccfe04e54f70db97d8d8ca60b0ab0b59e8354fe7e59315492b06476b77dc48d6fb1b9dd926d3e25c74b7da5a288e23dedf92c319e5564d3df95261f01289b8f0eddd025598ce69d71ae8a", 0x8e}], 0x6, &(0x7f0000002600)}}], 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, 0x0, 0x0) (async)
bind$vsock_stream(r3, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000002740)=""/52, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={&(0x7f0000002880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0xb}]}, {0x0, [0x2e, 0x2e, 0x61]}}, &(0x7f0000002900)=""/115, 0x29, 0x73, 0x1, 0x8, 0x10000}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={&(0x7f0000002880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0xb}]}, {0x0, [0x2e, 0x2e, 0x61]}}, &(0x7f0000002900)=""/115, 0x29, 0x73, 0x1, 0x8, 0x10000}, 0x28)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000002a40)="00e797e8ee26cebe9f9643b04e3c75106bbb9c42f0de66779cb576797b640ca32a5fd82944ab315d90d68848240304e4f29a7d891fb12baee2efa1d7cfea19cabd9a16d4e8cf82", 0x47)
socket$rxrpc(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@bloom_filter={0x1e, 0x5, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x7}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@bloom_filter={0x1e, 0x5, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x7}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x4, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002c40)="4f7a138c3b9cda2847685dea4458c4e4b3307156", 0x14}], 0x1, &(0x7f0000002cc0)}, 0x4800) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x4, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002c40)="4f7a138c3b9cda2847685dea4458c4e4b3307156", 0x14}], 0x1, &(0x7f0000002cc0)}, 0x4800)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000004140)={0x28, 0x0, 0xffffffff}, 0x10) (async)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000004140)={0x28, 0x0, 0xffffffff}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000004180)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000004180)={0x28, 0x0, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000004300)={0x7, 'vlan1\x00', {0x3}, 0x549})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x1, 0x1, 0x54, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x75c1cdcc61b2d649, 0x20, 0x3, 0x5}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'syztnl1\x00', <r6=>0x0, 0x2f, 0x6, 0x1, 0x1, 0x54, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x75c1cdcc61b2d649, 0x20, 0x3, 0x5}})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) (async)
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xc, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_MASK={0x0, 0x5, 0x8000}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40810)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000043c0)={@mcast2, 0x2b, r6})

1.024002508s ago: executing program 1 (id=1010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f8bf48abe0"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc810}, 0x24000000)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', r3, 0x8000, 0x7800, 0xb, 0x8001, {{0x1b, 0x4, 0x3, 0x35, 0x6c, 0x67, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@generic={0x86, 0xb, "5d935ba80d567805f0"}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x17, 0x92, [@loopback, @broadcast, @empty, @multicast2, @local]}, @end, @rr={0x7, 0x23, 0x1c, [@remote, @private=0xa010101, @broadcast, @multicast2, @rand_addr=0x64010100, @multicast1, @remote, @remote]}, @generic={0x44, 0xb, "ae024997db5adf8428"}, @noop]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe4, '\x00', r3, r2, 0x5, 0x0, 0x5}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000003800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200c880}, 0xc, &(0x7f00000037c0)={&(0x7f0000000580)={0x3204, 0x15, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@typed={0x5, 0x3b, 0x0, 0x0, @str='\x00'}, @generic="b018", @nested={0x10, 0x72, 0x0, 0x1, [@nested={0x4, 0x48}, @typed={0x8, 0xf9, 0x0, 0x0, @uid=r5}]}, @generic="b51054b27dd601507cba42fd0af4dbf0456f7d0fbd4a8fd8bbb9af25b514a091efccbc861a4d99c53cecd678d53f830eab811955ea9583f7d0bf3625bc1c0b179b1b6ac3cb4438240df5ad4f2d7ad905328ad73ede1b6d03a485d3dfcef03f5af46007e9a9cf7f2c5307632efcf473da6f96bbf94b64a368a85ed25ffe97d6590beab78dc12f59dcd0b3e284f42b0a3618d43fb7bc33b3a4afb63b07f5fab515fba17103700c95fb2dc6b8ce7a6bf2c1ee", @generic="7d187712eb1435add0d7277ae19353e2269f367173506cb3f22b70cc0c01cdf543f39a84edc8fde45d6d3ec9c8b99c635090529971dfd5d370d180bb54673d68276735a86ce923f6eaebf42e115a05555b5175ef243bbf804d1236c3b62a655780f3bd93ab01e5250cf17924fe13f6294f23b915b3ca032707378b2f8ab5935326d135962b984aef3427f1e0dc22945a1fe098e018d3e65716a1291f13974890d91933e71981550e41796a3f914dbf5a76955b31f9b9a188ce04fd2361e3bd9a4551dcd6a459f894bcfcd99f8534cd52682c34515e4305c824c63fdb7fb77215b4eb64bdd460fb5d038187d1d33c9d39d1ae2420fd19127279704acb7d889d0384d69096a92f0f50aad44a77eaf95a7c4ea20e6316571bb6149360cf43f7a2db31425c6df7e06355fdc97fca56251ce1191961bb4876e1bc718f73132b6b53a29f7adfae436e5320a9aa839b1aba2412e7790a9ffd0e45d01349812ea12058d09d3f1bd1e5bdd89682fd2bf84a75c33c65281bd6e308adf167927843aab52edd1eb47d4aeffd9a9871e77d780136c32f2029cd681500471082b023004d01e9c43c6be820979460e4245652de2f6749c566da6ab0a15b7e5f021d6ab0af0e5d7ca5066d17eba9de579d6e95ecef1e6ad8e8de1719c27bd1cdd33f0a85209e89b8e8eb2404109468c2e430dedbf7e97a3e59ed0f71b382af28d8dd86ba5bab7b7b543fb2c9a6d1f8e063b8cb3e2c847246d30403e39e0d5e0c451dafb90da5f2a6e0f10bb7c1e8b7194deaed6bbafa85630a8a1f2c21da65588108ff989f95ddd815ccbe1071847dd7b727a46fb49c6fc4af34750d74fc3cce8b9b6b71a9ec02a22a5f8cf6b333bc15a83ac362c1f4037e6fd3b08f215271cbc2f2ca37f9176b063000ad089fe0ed0b5ea55b40fd47187f6d714def29c4d00b69f1a3d1df3f9eea9755d23a5239f731fb77df345a53564515b25b0d5b5714adf65a1a090995bfcab9246e15b186818b517b4268c3a537aca05e1b21e2eed0e58e289e20a1837190a91d7542b10c6b06f4c520e7a8b4f9a99881cc3dd8f6ec7f630d4ff1723f7a54588dd529f30990f1a2431c18071a06f110b070ac83485ac6e560dc2c21ea1fb798b0daa83c96a11a091fbc34eedbf75ad3154269fac6b0dbe08dc66c232c10394f6e48f48c1c3869d908dad3d53ccfaf8739edbc2983f7f64801f321f852a0f39a3fcb1f3c844ce6a3d613566a0469504439c2a24dceead0a90809075a64cf34c1cc40a87085a76e9442bd205d15f9842091bbf67e819d5f9ad2b886ac51e9b8f94d1f915d7de47ab5ed8dbd8c03518664a2f4d04897090a7a7ca58154b223f384318440cb34ed97aa2153647eccd124f3d4fa511e5e78e81ec9bfec1df28256601da90a1e7d8742cd0ba09f5765b391ba77858a43f81ceeb617c56ee89279361481a164d138da10d6b6ec7f59bc05e02ec23d76857269920f0cf3cb266497abf77ec85c55619ff7357a4ccb4a8cc20796b0c99c240d63755a13a4ddd37793e046f71953fd6389950bbe68bd559e6b69275fe0fb763c45104660c2357e50b824ef3a03938d22645aaf13401fa66a9973f79d22692c9b919103528f20fb5dab49424ff0838b05e838bb9774c301dfc8dabee0f86182d6de297794da5db53bee0e50dea12d7bfc5854863f426d231b1598ed6f5a948d994b7015215f36aa8ea67ce5f198a80404adb1443ede6775583093c735c1a6923cffb08a74594d7ce9d30124a1dd9a310b6ad78d7909bc333671f0c7ae0dd2cfef88f13370dc7fdef54f4be78db2d7c43b2a1766964c20c13ed78fe9708efcbbe5e5d16bf0bff5141887be049dd8eefd06fdba0e5175b7715e10380a13a0aa4a25472d1fd39bee4fbc1c6c240bf37aa98f13583a7bfa4c92cc212c611235f149e9e2eca25bb0dbfdcff2c3f7fc89d405072ee8536278ca508542c9d560e686dce7e949ba8b40620ac6223123d2465effceb69ab0c0867efcf3b87e5f85b8eb4a3ce0c8c5810397f01219184907d5857ebb3fb8325168af9a85ea75483d9acbb172f2a05679613abfc30fb0d8b88e9718d980ef472877c93b13dfebb5a894e677eed557ba4e4539cc458cf25f08de312b3aaa94f34795b762756ef393df975c1bce6b04a94600b50e1def6b3de73f6b50b4693ddec12e6983307cb4eddc5efa6fcd46a5940c17a1d2e5325bc06db05931a97d90f3be553ec2e53d7b93ffeef64d76ee1b83cd3e93a9f3b47156b41dbe28d2681539c073f253034ed7e4aa963673c67eca7000e9e3de0b0336ae0276062924fab8a38eda099802b0208534730e466e9a3df5472e9f2fe8313a489dbc3be77bdf1fc407578beeccceb8e2ec6e6a6c634411ad549e59f690d3fe7678d8b64ed3d2ec872e3f59355b7b40772a034cc2c4cb8519f587e70052aad9af4bd128ee15cda1b4979907a55936064efa22bb32a96b8341d6497327e65d223aa52c1feb5f2690ee2e11471994204bd2586a61070a642229cda44bf25184bed1350d13587423f144ecb323d123b6dcdb987bcd059c247f5f3df7d8f82aac62a5858562ff1c7f8be372748df90378fa9181134395305a07054d0bd22895e7611c709a1f02b74d7c958d8a71c91be47c206387ecadb0c39b86164052e8a34e366496825a729edde461bc20ab21b59beca63cff32ec0ff665a96384ee221fc1b5bd5d2370154428a88f6afe9ffd40203b4de84806612fa9fff35ff5a7480a39f3c4d56718f980bb7f8ca8a1302617bc3411ab6a22a031c0744838093d29271e733c01fe0853f0ac1fe891c0d86c431c7f3996d1ae0fd75f872df5f9a3cec78a5ad99459218ae8431b44c7554566df65bca7f390765ccc28ec11f2c5025932ac6a52a8dee81c46c29774917d3ed0ddc7ccfc6c00be854a157a6ba52673e6e0d38e946a2f93a7858b6ba7d60733ebd715610a396bfc51d47439d928ac40d385f6d8026fb33f7e40c44d4e9a046e4796887a41b4ccb6ee6dbcf7c29543988fb887216360ced7a016eda25db47fc48264573b13c291f128b94371f0785ef39054115c59579630db699fe923ffa147d4609a54b5ac5470e60360ac76cdfda893b1b276ef6ba670d9c945e3bf665248aa96e11e9d5a0cdbde784a2b7f758b7f3c294d6b3788b293479aea64032342a13fda48a4a7af0f4476ed2ea1671631efc19d7d641df5d1b92aeff6238f8480e7709c7f6d4748fec585cef9f170e2214bd539dedb3480a9df4a2eb8af1a514bfb5dd573249456f4a1ade8ccdc8cfc787d917ab67717ce94eed352ecc91104adcbcc1de72189b625613d1209cc42f1492f1948f950073659575b78646267eb70c5d5f3d1c8316cd0ba4ae363ed1af3e5f7bfcb555aaf4ec7242a125e00e375b814bc459562b9de2dd373c5954de0548c77ee2ec6fdc09825900ea74427e4650557f7094ea3dd6d9b2b613570a4362fd1cadcbbc1b7c54fcc5628347ff539003fc7c4772ed2da765854219c65cbf900b93aebf8cd46b51fb57e79bc5cabe8a021ad35d715f4a836ba9ea23dff94c7871164c1018f0602cb2024899f96bd0c66b62e2fe2d9cb4c66fc33e8d3eeea83842bc8f2aa8f4442af60f845404d869912124763926eef879ea34a100ba301e8248e75237c48af25935e47915907b46d4cd5e4c0adfaf00de87ca4c632da19be0ba87b935778c0b6e2d8b04a812e4d949837b00e7e04a14397adb623836576552dedc9f8825e24711055ec010c7ad77f9732b6d4869752c6b00d4d6f3f8dcaa50ae99ff58fd429cce972d459fe313d23e788774e0490d1362c94766582e01e5091a5d8ddede2511391ad1a6c2582bf3e3b9e19616536036b9105bbc3e42b428b7c99ce804c999132a94ef96b0f3ec27f78c43b9e4333e0094610dd37bd2d4d244694b20147336f4b3e6696084127239369cfe6c45b5645b2563c0728e94b0c8b090f4ae0e259c937f3d7d5fc2eb6ad51d5cdd55fd4c82c9f4e8a3e70906ccdfb24924f71b0fda5783932eae4fa6fa6242ac6ce4f6b20f05f35d8d535c0fb6fcb9f3b96823e1118e6dfa1a693bd56699e3ff2181713c4bf08b5a85e7f44729f30b5e30ce9ed5a3921ed76f7e5dc337fc8a0284b9e6ba6f27a65b102d4cde806d4f815c4318bfdaf205b9fe0a05b099fce52d5b5bddcb15de0f24bb0e762cb742f6d16a2bf485497079083f0efcae5480ac0567accaeb614bde34cf7fdcf139db324325de4b6c0e55233b630cd22e50eb74491551315ae5370607dc1bf015c1e170befb26a6540f4782ed71e857ce412b22a9d8cbb50eb11dde769c8cb79e65e536433aba286131b947fad643ba8de850dcad1d3c20eb433408f47f87262f9b0ae0a10b9cd2d1a7d4c54cd04facd3c556e1dd1c82786a5a5db33d8d528e48e362e368f87cfde7222bb7f5a6175cc7e07d582cd6b785b0a5d7fe3128a7a81a7d9eeca08e5c2a757066f69adee9eccca0cb143fd469f58dde1d7c438870288dd1ca456154cc7e71acc86d9ac435cdc825653a9dcd6712b7b0b979cff65137a75c7aa76ce690d359d6840b9a2953115b05f0c661e2520c4e9982fb447a77454413a76f88a4ffd2ad3272412d04d0477a79335e6da06e47c0887955f80256f5bec8a19a1e386e5e73f7b3ce335d6c0f03f80069f833eb7fb3677210da43da1669b35a358037b799ea1fea28a01d6ee4e392499f17d9411d88a7ead9a3a704967ea6902a69951205ca0e7dc8e89b207b12478287246affc010d23c45d3205c1281b609b03cfd3105af6f1e442c9e0174f0722a0fd1c54e326242579f786824ac1d80911e4ccae4ed124415056b90eb8312ff8afbb9f68b98bd4f655f9a81e7e0b9ac63143926ef79dfd551a0aaf1c82712e01466a2565b7e7d77a025eaee204574b4df68f3f5f15834462ea3943922369e413079d8fe67cd1f5a51de81721daa4b4e115ef7308127bfd0b86a6ac2c83a8d309db9f4329baa41d4d8cd615a51bed7e7b8b4baa0b91e22b28e23440208179fabbddef56a06396451f6e87941c398c656eee1d4143870b923e08a4fe940786afa5f5fad3cf2a30b25fe2ee81fea501ebed48cc4f624bd1bedcb263cb07932e75a2ad93fbac66cfaf11475a5048b463cf3c841825b0143cf586529b7cb781a63bcd8a398f8b24fb6cd3d84e0a955afdad5a87d3a9bedbf641b8a4265cc22a2946e6d4e2b88fbd020564d1984f2b71b1e1dd03c0746d95d408204b22fea3ecbb6009e3030cb9f59c43d988f2dfd70010a85d37d6f2f5442a0a93f95cbf24ae825f21cfc4fbb8ba1fe1c345fcc4bd14ca43d2dd1083528dd3d8640fcad6b6eea4b0662413361260ef5cd4d0be2daeb460c47860f1eb0a10d570a326391a71829d44d12468211c360dedc3c5e29a539bf640a532ac5864d600ff85d8101dc531eaec71d50c43620771a4c2f24f4c72e849c0259d7f49d0fafd58d771b23c86764c9521d323d334df5458533c32893b6380b98e43911ae094a54aecf57d301139f3e4d6db0856dcac4bb41694f7d81d1d1cdbdf268db50929c5fa0f5eda24f8e39322474c0568ba976575ef53de97a6291592488c6d34d8eb5eeae2f35a4b57dc952a0950496f716fa2f8cc7d7d27c0cc071cfc0cb2d61c14ec8e271b52d3f6260833485b542ad51b6850848b80de0ae5878c71059c72498ade61321afe0b7cee44c3f38e7d783ddd61ca2d5eb7e955c1896ae2aab6822db05d4577df80daaf20e3610ae28556a3f2e84f7201d51c1ec9ceea3a6064c7369f7b6fd7", @typed={0x8, 0x86, 0x0, 0x0, @fd=r6}, @generic="89996a9d9e62d2f41d4bdee83e89bcbb928be0a3ccc2d1daf95ddf39dc25dcfee0d8c9facf806b139b67b48c554227531ee62ad49fb740dc881a9ba79b6f323c43a2ffbbacd1af2175fa84ae64294a68fa35a96607d5a6369b3efb1881bf667526e72df4d363ba1c041305cc5d21f4aae8430933", @nested={0x1004, 0x16, 0x0, 0x1, [@generic="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"]}, @generic="53353ce2d33dedca3fcb078bb35f4e7791b6af1533f2573d74a909b464e7e9a60c61417f99b42a8377b7670724f103c8b6e1455c04cb9f0b0696c28436e9233ccb1e0f9207bc60c20b017065b5357a64fe2cf8681c3f593ac527bd24ea469e73d1f1b8483bf8ab37d263d9ee7b2710306b71b01490f4d14427cdbaf1a72191ea57510031bcaa0e4021f0a877544b50d87576a16405ab26ae37407069b021e396aeee5ab6", @generic="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"]}, 0x3204}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000003840)=r3)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003880)={{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@private2, 0x4e20, 0x8001, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x3a, 0x0, r5}, {0x5094, 0x1, 0x8, 0x6, 0x7, 0x6, 0x2, 0xffff}, {0x5835, 0x23, 0x1, 0x800}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0x2, @in=@local, 0x3500, 0x2, 0x3, 0xa, 0x6, 0x4, 0x2}}, 0xe8)
getsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000003980), &(0x7f00000039c0)=0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003ac0)={'veth1_macvtap\x00', &(0x7f0000003a00)=@ethtool_rx_ntuple={0x35, {0xe, @ether_spec={@broadcast, @broadcast, 0x1f9}, @usr_ip4_spec={@empty, @rand_addr, 0x6, 0x3, 0x1, 0x9}, 0x3, 0x0, 0x147, 0x85b1, 0xfffffffffffffffe}}})
syz_80211_inject_frame(&(0x7f0000003b00), &(0x7f0000003b40)=@ctrl_frame=@ack={{}, {0x6}, @broadcast}, 0xa)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000003b80)={<r7=>r0, 0x10000000000, 0x10000, 0x3})
sendmsg$nl_generic(r7, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x1c, 0x26, 0x800, 0x70bd27, 0x25dfdbfd, {0x16}, [@nested={0x8, 0x7c, 0x0, 0x1, [@typed={0x4, 0x131}]}]}, 0x1c}}, 0x14)
r8 = socket$netlink(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003d00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004100)={&(0x7f0000003fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@const={0x2, 0x0, 0x0, 0xa, 0x3}, @struct={0x6, 0x7, 0x0, 0x4, 0x1, 0xc00, [{0x7, 0x2, 0x4}, {0xe, 0x5, 0x18000}, {0x2, 0x0, 0x10000}, {0x9, 0x2, 0x6}, {0x10, 0x2, 0x1}, {0x5, 0x3, 0x3}, {0x3, 0x0, 0x4}]}, @func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000004080)=""/116, 0x94, 0x74, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x9, 0x1a, &(0x7f0000003e00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0xa, 0xf, 0x0, 0xfff0, 0x1}, @call={0x85, 0x0, 0x0, 0x8b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x8, 0x8, 0x5, 0x100, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000003f00)='GPL\x00', 0x4, 0x75, &(0x7f0000003f40)=""/117, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x19, r11, 0x8, &(0x7f0000004140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000004180)={0x5, 0x0, 0x2, 0x1}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000041c0)=[r6], &(0x7f0000004200)=[{0x2, 0x3, 0x7, 0x5}, {0x3, 0x4, 0x8, 0xb}], 0x10, 0x8}, 0x94)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f00000043c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000004300)=""/56, 0x38, 0x1, &(0x7f0000004340)=""/65, 0x41}, &(0x7f0000004400)=0x40)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000004440)={0xffffffffffffffff, 0x1, 0xf7, 0xfff, @vifc_lcl_addr=@loopback, @broadcast}, 0x10)
sendmsg$kcm(r7, &(0x7f0000004840)={&(0x7f0000004480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004500)="f8f8dc558c3aa30ccdb14ca4cc50864f662186a69356abb92f10762cce45c779892c2593be4e5fb2e9f1d1ad84cdf47de57c636809fd1b4f127b62d11ae1a7b0062ce68466c24bffacb550bb69a18cb49ef53cebda1d6ca54f82ea763041cc277b280aa06faa79079447a4e24fb260cfcc5c9d308bc3ebf50bb9fe3b592fd72eb236feb88c8620f18198a68f822175af1f98fabf87d443bb31b566bcccf67c2b933b72b6bd226635f59150e541d06c06c7de3086b1c9c2fd4836941a06d32265690e763add", 0xc5}, {&(0x7f0000004600)="10e80af942ade2b353148e006c99326f0f2535c8bc5d0a240465cd5b88e83b5ec756ae59826ef1c8189d3c85fe6d259752cc6537a91250d3f4ba65505c", 0x3d}, {&(0x7f0000004640)="a22ce2903e", 0x5}], 0x3, &(0x7f00000046c0)=[{0x50, 0x107, 0x1, "09cee82beb47a11aea7bd5983a69a8b98150cb3f52a5bc16c1ed81c64eb4016cb80c81f4212d44b9f803d86231280b3511bce84f7f733dc8293c55cd0eea4e0b"}, {0x38, 0x106, 0x8, "3f8f5aec2712afaca171d6e9e011a6d535f1c12bc52aa661826378c0522a798a7a9b819f21"}, {0xd8, 0x29, 0x100, "65a30197c921c1a193a62d8d27d533e1a68299ce847ae05ab9402fdbb45f18f6a9caa154087ce379f306fd855b249f8085fc6305f3ca380f87fa1b43688a1a48e0a045b3ef99cc5aaa62d1afb181a07b557f701dcff6305433129e343409f4105728e38f7710af787d84842c39eb245e04910b7dcbdfcbf5872bec8623d696381f4eaa44700559b4282944cdb22e088342e1211bb4bca5b992b68dee7de574a19ecdee50aff963db7910b116ea593f1983c0a1ced9cb7d1fb19f396f9c09509d1577"}], 0x160}, 0x24004000)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)=@ipv6_getaddr={0x28, 0x16, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x78, 0x11, 0xff, r4}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048845}, 0x20000000)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r13, 0x890c, &(0x7f0000004980)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'veth0_to_bond\x00'})

1.023579307s ago: executing program 2 (id=1011):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d00010027bd700000000000030100800c0002"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000040))

949.762785ms ago: executing program 2 (id=1012):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}]]}, 0x34}}, 0x0)
listen(r1, 0x10000)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
sendmmsg$inet6(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006)
r6 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e20, 0x564d2d59, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x0, 0x0, 0x5, 0x0, "094fb9286045e6ce1a2d6f4c74b1fedb444f3693c763ded47e65549841238077f9f824c446f3ddd939008f55a4f7e173c89b39bb9b4a049e3c63dbb3e2ff23049a7eed89affaea1713c19407a06358e2"}, 0xd8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

790.074035ms ago: executing program 2 (id=1013):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0xb00)

789.112423ms ago: executing program 2 (id=1014):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000280000006000000000282b00fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = accept4$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80000)
recvfrom$unix(r4, &(0x7f0000000100)=""/228, 0xe4, 0x2040, 0x0, 0x0)
bind$vsock_stream(r3, &(0x7f0000006ec0)={0x28, 0x0, 0x2711}, 0x10)

408.755954ms ago: executing program 1 (id=1015):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x0, 0x1, 0x3, 0x5, 0x101, 0x2, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0xabc2, 0x762, 0x3, 0xd, 0x8, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x9, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x7, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x7ffffffe, 0xfdffffff, 0x2, 0x2, 0x0, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x40001fc, 0xc5c, 0xffffffff]}})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

408.395403ms ago: executing program 1 (id=1016):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
write(r0, &(0x7f00000003c0)="bca2dd8eb498d388384808722e53d253573fa6ebac7e017489ee1850a4c787f5b33142de97f900aa2874b9abbafdefc52f0d662ce7e1e89b7c7c76d72f62dabf040c48c4798f9829a47395388d91e139971a13ca3151262e28682bb5b086d27e96f4851cb77c43", 0x67)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$tipc(0x1e, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x6020480)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, &(0x7f0000000080)=0xfffffd4f)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="88fe351fee2832730d57cb0b3f474ba24e9edfdb7d38046502fe714110ccd494db545f0721521a281f9875c59e245ed6f5c0f98abde679b5cd7a88dca772aef8fd236ad60a6454ed0207e71c2aee703c458a12ebb1ef515906f81d50d989b8ef7f9521b9819b5890451035a732e32b684ffc7ae7823e8d04dbb9cefe", @ANYRESHEX, @ANYBLOB="56bef93ff0382618049fb78c5062b405b5afd9b3a3fb2768bc19cc4947f8a44a184fe3ef1e36fb03013e8954cc358ebe6af3ce7a9f3df12f78a7106accf34d0a893899a6896882f20b8ce7fe5a9eb7b02a672195087888bb3673068965a6948f4ea0e416972df6d897b7f0f01c7a266e8a03820a3f540c17a5"], 0x248}, 0x1, 0x0, 0x0, 0x48841}, 0x4048000)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unshare(0x68001080)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x42, 0x41}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5293db53}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x84)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0xfffffffffffffe69, 0x114, 0x1, {{0x0, 0x6}, {0x0}, &(0x7f00000006c0), 0x1}}], 0x48, 0x8000}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000000, 0x200000005c831, 0xffffffffffffffff, 0x0)

296.037302ms ago: executing program 1 (id=1017):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20ce00, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c9", 0x56, 0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000380)=0x1, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mr_dereg\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x4000)
socket(0x10, 0x3, 0x0)

237.025399ms ago: executing program 0 (id=1018):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x1200, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

166.933993ms ago: executing program 1 (id=1019):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
nanosleep(&(0x7f0000000180)={r3, r4+10000000}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b7a962d3e468b619d200000000f2170e65e3f50327e422000000000000000000007700000000001900", 0x3c}, 0xffffffffffffff49)
close(r2) (async)
close(r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
getsockname$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10)
r6 = socket$alg(0x26, 0x5, 0x0) (async)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000200)=0x1)
close(0x3) (async)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10) (async)
listen(r7, 0x0) (async)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r9 = accept4(r6, 0x0, 0x0, 0x0)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'dummy0\x00', 0x9})
recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) (async)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x57})

57.561215ms ago: executing program 1 (id=1020):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a010400000000000000000a0000050900010073797a3100000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000008000140000000120900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', <r2=>0x0, 0x80, 0x80, 0x4, 0x6, {{0x34, 0x4, 0x1, 0x14, 0xd0, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x7a, 0x3, 0x2, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@multicast1, 0x400}]}, @rr={0x7, 0x1b, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x1, [{@rand_addr=0x64010101, 0x400000}]}, @cipso={0x86, 0xa, 0x0, [{0x1, 0x4, '~D'}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5c, 0x2, [{0x0, 0x4, "52f9"}, {0x0, 0x6, "d7989679"}, {0x5, 0x7, "5d781eccd8"}, {0x2, 0x9, "c2ab57034c3fdf"}, {0x0, 0x9, "bc96409f5ee7c6"}, {0x7, 0xf, "db4f1a1ce28789dab988a0aef9"}, {0x6, 0x7, "5198561105"}, {0x2, 0xf, "8f96c2386c1e736ff8d41c4b42"}, {0x5, 0xe, "9d761f8c31c8a629ce474a7e"}]}]}}}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000110240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000000004000800000008000700000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=0x4)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0xb, r6, 0x4}, 0xc)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x3f7, 0x200, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r0, @ANYBLOB="000328bd7000fddbdf25020000000c00018008000100", @ANYRES32=r2, @ANYBLOB="1400018008000100", @ANYRES32=r2, @ANYBLOB="0800030000000000540001801400020076657468305f746f5f6272696467650008000300020000000800030003000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="080003000300000014000200766c616e3100000000000000000000001400018008000100", @ANYRES32=r6, @ANYBLOB="080000de", @ANYRES32=0x0, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0xc004}, 0x840)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80404}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbf9, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcf7}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa69}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x840)
bind$vsock_stream(r9, &(0x7f0000000440)={0x28, 0x0, 0x2710, @hyper}, 0x10)
listen(r9, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r10, 0x111, 0x5, 0x4, 0x4)
accept4$vsock_stream(r9, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r11, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd0000120000000000000064d6892b0f9a11"], 0xfd0)
r13 = socket$vsock_stream(0x28, 0x1, 0x0)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0xc, 0xff, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}, @remote, 0x80, 0x700, 0xd0, 0x1}})
connect$vsock_stream(r13, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)

0s ago: executing program 0 (id=1021):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x20, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000000, 0x200000005c831, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15350' (ED25519) to the list of known hosts.
syzkaller login: [   51.358302][ T5771] cgroup: Unknown subsys name 'net'
[   51.466052][ T5771] cgroup: Unknown subsys name 'cpuset'
[   51.470827][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.496662][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.954327][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.958088][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.961366][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.965782][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.969210][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.006709][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.012609][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.017165][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.021448][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.025814][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.080919][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.085027][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.089093][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.094021][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.097842][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.309794][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   59.391643][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   59.448404][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.451833][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.455178][ T5817] bridge_slave_0: entered allmulticast mode
[   59.458286][ T5817] bridge_slave_0: entered promiscuous mode
[   59.484800][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.487847][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.490859][ T5817] bridge_slave_1: entered allmulticast mode
[   59.495017][ T5817] bridge_slave_1: entered promiscuous mode
[   59.549910][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.552590][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.555643][ T5821] bridge_slave_0: entered allmulticast mode
[   59.559194][ T5821] bridge_slave_0: entered promiscuous mode
[   59.565782][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.568810][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.571034][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.573552][ T5821] bridge_slave_1: entered allmulticast mode
[   59.576512][ T5821] bridge_slave_1: entered promiscuous mode
[   59.595537][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.641033][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.649374][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.659543][ T5817] team0: Port device team_slave_0 added
[   59.688493][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   59.698267][ T5817] team0: Port device team_slave_1 added
[   59.702093][ T5821] team0: Port device team_slave_0 added
[   59.712336][ T5821] team0: Port device team_slave_1 added
[   59.755911][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.758759][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.769347][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.791926][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.794898][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.804987][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.816530][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.818864][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.828225][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.854163][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.856913][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.867714][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.907406][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.910396][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.912722][ T5824] bridge_slave_0: entered allmulticast mode
[   59.916563][ T5824] bridge_slave_0: entered promiscuous mode
[   59.924529][ T5817] hsr_slave_0: entered promiscuous mode
[   59.926929][ T5817] hsr_slave_1: entered promiscuous mode
[   59.929283][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.931562][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.934779][ T5824] bridge_slave_1: entered allmulticast mode
[   59.938240][ T5824] bridge_slave_1: entered promiscuous mode
[   60.000652][ T5821] hsr_slave_0: entered promiscuous mode
[   60.004254][ T5821] hsr_slave_1: entered promiscuous mode
[   60.007229][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   60.009643][ T5821] Cannot create hsr debugfs directory
[   60.029990][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.036780][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.116506][ T5824] team0: Port device team_slave_0 added
[   60.142530][ T5824] team0: Port device team_slave_1 added
[   60.186497][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.189173][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.199558][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.216984][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.219912][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.230253][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.299841][ T5824] hsr_slave_0: entered promiscuous mode
[   60.302369][ T5824] hsr_slave_1: entered promiscuous mode
[   60.307036][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   60.309444][ T5824] Cannot create hsr debugfs directory
[   60.487294][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.506624][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.535418][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.562249][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.626646][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.661269][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.672183][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.697347][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.756108][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.769792][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.778082][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.794804][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.899791][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.948128][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   60.964119][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.969710][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.972954][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.988783][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.991099][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.004025][ T5820] Bluetooth: hci0: command tx timeout
[   61.008714][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.032501][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   61.059961][  T805] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.063089][  T805] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.076848][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   61.083226][ T5820] Bluetooth: hci1: command tx timeout
[   61.084041][  T805] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.088043][  T805] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.105047][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.107829][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.121934][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.124449][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.165008][ T5820] Bluetooth: hci2: command tx timeout
[   61.207397][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.361162][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.378923][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.440004][ T5817] veth0_vlan: entered promiscuous mode
[   61.448370][ T5821] veth0_vlan: entered promiscuous mode
[   61.462547][ T5817] veth1_vlan: entered promiscuous mode
[   61.472076][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.486089][ T5821] veth1_vlan: entered promiscuous mode
[   61.520567][ T5821] veth0_macvtap: entered promiscuous mode
[   61.534962][ T5817] veth0_macvtap: entered promiscuous mode
[   61.544658][ T5821] veth1_macvtap: entered promiscuous mode
[   61.562496][ T5817] veth1_macvtap: entered promiscuous mode
[   61.567192][ T5824] veth0_vlan: entered promiscuous mode
[   61.582272][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.594699][ T5824] veth1_vlan: entered promiscuous mode
[   61.600052][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.609826][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.627041][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.630942][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.635687][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.654866][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.658766][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.693165][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.696884][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.720835][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.731637][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.749468][ T5824] veth0_macvtap: entered promiscuous mode
[   61.789372][ T5824] veth1_macvtap: entered promiscuous mode
[   61.799931][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.804543][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.857812][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.874379][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.877052][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.891050][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.912827][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.915493][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.916849][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.923836][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.931453][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.943719][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.947131][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.960610][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.002058][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.083856][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.087129][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.157354][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.160756][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.317820][ T5888] bridge0: port 3(syz_tun) entered blocking state
[   62.325356][ T5888] bridge0: port 3(syz_tun) entered disabled state
[   62.328253][ T5888] syz_tun: entered allmulticast mode
[   62.332293][ T5888] syz_tun: entered promiscuous mode
[   62.336136][ T5888] bridge0: port 3(syz_tun) entered blocking state
[   62.339534][ T5888] bridge0: port 3(syz_tun) entered forwarding state
[   62.350442][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   62.362528][ T5893] erspan0: entered promiscuous mode
[   62.373731][ T5891] netlink: 'syz.2.4': attribute type 1 has an invalid length.
[   62.383849][ T5890] netlink: 'syz.2.4': attribute type 1 has an invalid length.
[   62.443461][ T5895] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6'.
[   62.600242][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   62.609329][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   62.642253][ T5903] netlink: 'syz.1.7': attribute type 10 has an invalid length.
[   62.642345][ T5905] netlink: 'syz.1.7': attribute type 10 has an invalid length.
[   62.652646][ T5905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'.
[   62.662167][ T5903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'.
[   62.688818][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   62.734875][ T5905] dummy0: entered promiscuous mode
[   62.748325][ T5905] bridge0: port 3(dummy0) entered blocking state
[   62.751205][ T5905] bridge0: port 3(dummy0) entered disabled state
[   62.764480][ T5905] dummy0: entered allmulticast mode
[   62.777970][ T5905] bridge0: port 3(dummy0) entered blocking state
[   62.781018][ T5905] bridge0: port 3(dummy0) entered forwarding state
[   62.974908][ T5922] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10'.
[   63.001979][ T5924] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11'.
[   63.093763][ T5820] Bluetooth: hci0: command tx timeout
[   63.130541][ T5928] sch_fq: defrate 0 ignored.
[   63.161513][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   63.172475][ T5937] Zero length message leads to an empty skb
[   63.179973][ T5820] Bluetooth: hci1: command tx timeout
[   63.244199][ T5820] Bluetooth: hci2: command tx timeout
[   63.451271][ T5946] netlink: 'syz.2.15': attribute type 3 has an invalid length.
[   63.708201][ T5957] netlink: 'syz.2.17': attribute type 21 has an invalid length.
[   63.833752][ T5963] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   64.426675][ T6012] tipc: Started in network mode
[   64.428361][ T6012] tipc: Node identity , cluster identity 4711
[   64.430329][ T6012] tipc: Failed to obtain node identity
[   64.435272][ T6012] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.465470][ T6011] syzkaller0: entered promiscuous mode
[   64.469818][ T6011] syzkaller0: entered allmulticast mode
[   65.163958][ T5820] Bluetooth: hci0: command tx timeout
[   65.243549][ T5820] Bluetooth: hci1: command tx timeout
[   65.323448][ T5820] Bluetooth: hci2: command tx timeout
[   66.364674][ T6047] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET)
[   66.531357][ T6052] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   66.643081][ T6058] hsr0 speed is unknown, defaulting to 1000
[   66.645688][ T6058] hsr0 speed is unknown, defaulting to 1000
[   66.650761][ T6058] hsr0 speed is unknown, defaulting to 1000
[   66.665028][ T6058] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.677629][ T6058] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   66.739938][ T6063] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.754592][ T6058] hsr0 speed is unknown, defaulting to 1000
[   66.760197][ T6058] hsr0 speed is unknown, defaulting to 1000
[   66.771257][ T6058] hsr0 speed is unknown, defaulting to 1000
[   66.849800][ T6067] netlink: 'syz.2.51': attribute type 3 has an invalid length.
[   67.244209][ T5820] Bluetooth: hci0: command tx timeout
[   67.324637][ T5820] Bluetooth: hci1: command tx timeout
[   67.382219][ T6101] netlink: 'syz.0.58': attribute type 3 has an invalid length.
[   67.393977][ T6101] __nla_validate_parse: 24 callbacks suppressed
[   67.393999][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'.
[   67.404096][ T5820] Bluetooth: hci2: command tx timeout
[   67.518442][ T6111] tipc: Started in network mode
[   67.520677][ T6111] tipc: Node identity 56b2067dcf5c, cluster identity 4711
[   67.524781][ T6111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.528610][ T6111] syzkaller0: entered promiscuous mode
[   67.532018][ T6111] syzkaller0: entered allmulticast mode
[   67.552527][ T6112] tipc: Resetting bearer <eth:syzkaller0>
[   67.708637][ T6138] IPVS: set_ctl: invalid protocol: 35123 255.255.255.255:20001
[   68.262082][ T6109] tipc: Resetting bearer <eth:syzkaller0>
[   68.281238][ T6109] tipc: Disabling bearer <eth:syzkaller0>
[   68.489289][ T6202] hsr0 speed is unknown, defaulting to 1000
[   69.766427][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   69.777090][ T6245] netlink: 452 bytes leftover after parsing attributes in process `syz.1.82'.
[   69.900350][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'.
[   69.920326][ T6252] bond0: entered promiscuous mode
[   69.922681][ T6252] bond_slave_0: entered promiscuous mode
[   69.926266][ T6252] bond_slave_1: entered promiscuous mode
[   69.932384][ T6252] bond0: left promiscuous mode
[   69.937003][ T6252] bond_slave_0: left promiscuous mode
[   69.943196][ T6252] bond_slave_1: left promiscuous mode
[   70.040619][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'.
[   70.217252][ T6275] geneve0: mtu less than device minimum
[   70.259847][ T6286] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   70.342466][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'.
[   70.626674][ T6309] warning: `syz.0.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.011277][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.014326][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.251399][ T6357] trusted_key: syz.1.109 sent an empty control message without MSG_MORE.
[   71.266989][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   71.269775][ T6373] netlink: 2 bytes leftover after parsing attributes in process `syz.0.112'.
[   71.405165][ T6381] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   71.470768][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   71.517947][ T6385] netlink: 124 bytes leftover after parsing attributes in process `syz.0.114'.
[   72.441976][ T6418] netlink: 'syz.2.122': attribute type 3 has an invalid length.
[   72.446623][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   72.645992][ T6441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.127'.
[   72.666100][ T6440] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.304818][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   73.503792][ T6496] sctp: [Deprecated]: syz.2.143 (pid 6496) Use of int in max_burst socket option.
[   73.503792][ T6496] Use struct sctp_assoc_value instead
[   73.859096][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[   73.863517][ T6517] tipc: Enabled bearer <eth:vlan0>, priority 18
[   73.867289][ T6517] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   73.870594][ T6517] netlink: 'syz.2.149': attribute type 2 has an invalid length.
[   73.875401][ T6517] netlink: 'syz.2.149': attribute type 8 has an invalid length.
[   73.880143][ T6517] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.149'.
[   73.971440][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   73.980669][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[   74.315059][ T6541] netlink: 'syz.2.157': attribute type 2 has an invalid length.
[   74.327524][ T6541] : entered promiscuous mode
[   74.501986][ T6555] netlink: 'syz.0.163': attribute type 2 has an invalid length.
[   74.520655][ T6555] : entered promiscuous mode
[   74.677533][ T6562] hsr0: entered promiscuous mode
[   74.679793][ T6562] hsr0: entered allmulticast mode
[   74.682016][ T6562] hsr_slave_0: entered allmulticast mode
[   74.685589][ T6562] hsr_slave_1: entered allmulticast mode
[   74.689839][ T6562] openvswitch: netlink: IP tunnel dst address not specified
[   74.864800][ T5867] tipc: Node number set to 2582513277
[   74.906403][ T6574] Bluetooth: MGMT ver 1.23
[   74.916400][ T6572] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:21
[   74.920928][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.925726][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.928291][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.930684][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.933172][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.935490][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.937846][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.940409][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.942818][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.945224][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.947525][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.952454][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.962980][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.968478][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.970909][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.974956][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.977322][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.979607][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.981804][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.984503][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.986792][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.989140][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.991535][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.994975][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.997367][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   74.999664][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   75.001889][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   75.004728][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   75.006989][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   75.009323][ T6572] IPVS: set_ctl: invalid protocol: 24941 108.97.110.48:0
[   75.200393][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   75.205506][ T6600] netlink: 'syz.1.174': attribute type 15 has an invalid length.
[   75.216955][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.217085][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   75.222540][ T6597] netlink: 'syz.0.173': attribute type 2 has an invalid length.
[   75.227519][ T6600] netlink: 'syz.1.174': attribute type 15 has an invalid length.
[   75.232377][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.241948][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.254913][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.365912][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.182'.
[   76.674239][ T6654] netlink: 'syz.2.189': attribute type 3 has an invalid length.
[   77.150717][ T6694] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   77.258410][ T6696] TCP: TCP_TX_DELAY enabled
[   77.697080][ T6698] __nla_validate_parse: 3 callbacks suppressed
[   77.697092][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   77.944959][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[   77.947757][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'.
[   77.961534][ T6709] validate_nla: 2 callbacks suppressed
[   77.961562][ T6709] netlink: 'syz.1.206': attribute type 14 has an invalid length.
[   77.968890][ T6709] netlink: 'syz.1.206': attribute type 13 has an invalid length.
[   78.504017][ T6732] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   79.811054][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'.
[   80.115406][ T6799] netlink: 'syz.0.238': attribute type 3 has an invalid length.
[   80.124769][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   80.135373][ T6797] netlink: 'syz.2.237': attribute type 10 has an invalid length.
[   80.152014][ T6797] team0: Cannot enslave team device to itself
[   80.200883][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'.
[   80.429530][ T6817] sctp: [Deprecated]: syz.1.245 (pid 6817) Use of int in maxseg socket option.
[   80.429530][ T6817] Use struct sctp_assoc_value instead
[   80.429834][ T6814] nbd: socks must be embedded in a SOCK_ITEM attr
[   80.436870][ T6814] block nbd1: shutting down sockets
[   80.445008][ T6817] sctp: [Deprecated]: syz.1.245 (pid 6817) Use of int in maxseg socket option.
[   80.445008][ T6817] Use struct sctp_assoc_value instead
[   80.522185][ T6826] netlink: 'syz.1.246': attribute type 3 has an invalid length.
[   80.529709][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'.
[   80.781624][ T6844] hsr0 speed is unknown, defaulting to 1000
[   81.001281][ T6867] netlink: 'syz.1.257': attribute type 10 has an invalid length.
[   81.196751][ T6874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.263'.
[   81.252562][   T47] cfg80211: failed to load regulatory.db
[   81.711129][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.858639][ T6893] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.868223][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.930631][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   82.562112][ T6937] netlink: 52 bytes leftover after parsing attributes in process `syz.2.282'.
[   82.577384][ T6931] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   82.580944][ T6931] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   82.915672][ T6942] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[   82.918448][ T6942] __nla_validate_parse: 3 callbacks suppressed
[   82.918457][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'.
[   83.224398][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.288'.
[   83.321644][ T6976] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   83.492046][ T6987] netlink: 'syz.2.297': attribute type 1 has an invalid length.
[   83.497230][ T6987] netlink: 'syz.2.297': attribute type 4 has an invalid length.
[   83.500509][ T6987] netlink: 188 bytes leftover after parsing attributes in process `syz.2.297'.
[   83.611685][ T6998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.231194][ T7017] netlink: 'syz.1.305': attribute type 30 has an invalid length.
[   84.389186][ T7028] hsr0 speed is unknown, defaulting to 1000
[   84.407412][ T7017] tipc: Started in network mode
[   84.409709][ T7017] tipc: Node identity , cluster identity 4711
[   84.521523][ T7033] netlink: 60 bytes leftover after parsing attributes in process `syz.1.309'.
[   84.744540][ T7043] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   84.750750][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'.
[   85.148984][ T7059] netlink: 120 bytes leftover after parsing attributes in process `syz.1.316'.
[   85.171135][   T33] audit: type=1800 audit(1754545968.843:2): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.316" name="memory.events" dev="tmpfs" ino=478 res=0 errno=0
[   85.824855][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[   85.849276][ T7069] syzkaller1: entered promiscuous mode
[   85.851178][ T7069] syzkaller1: entered allmulticast mode
[   85.859290][ T7074] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   85.978737][ T7079] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   85.981870][ T7079] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   86.072528][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[   86.773689][ T7099] bond0: (slave gretap0): Opening slave failed
[   86.858201][ T7106] netlink: 'syz.0.327': attribute type 10 has an invalid length.
[   86.860646][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.327'.
[   86.867134][ T7106] dummy0: entered promiscuous mode
[   86.869546][ T7106] bridge0: port 4(dummy0) entered blocking state
[   86.871800][ T7106] bridge0: port 4(dummy0) entered disabled state
[   86.874484][ T7106] dummy0: entered allmulticast mode
[   86.879388][ T7106] bridge0: port 4(dummy0) entered blocking state
[   86.881503][ T7106] bridge0: port 4(dummy0) entered forwarding state
[   87.100702][ T7125] netlink: 48 bytes leftover after parsing attributes in process `syz.2.332'.
[   87.164673][ T7133] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   88.703194][ T7173] "syz.2.344" (7173) uses obsolete ecb(arc4) skcipher
[   89.019512][ T7213] 8021q: VLANs not supported on xfrm0
[   89.071048][ T7217] __nla_validate_parse: 2 callbacks suppressed
[   89.071062][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[   89.086581][ T7217] netlink: 96 bytes leftover after parsing attributes in process `syz.1.357'.
[   89.333601][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.359'.
[   89.895453][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[   89.899203][ T7240] openvswitch: netlink: Missing key (keys=40, expected=100)
[   89.908211][ T7240] netlink: 'syz.0.362': attribute type 2 has an invalid length.
[   89.911434][ T7240] netlink: 51 bytes leftover after parsing attributes in process `syz.0.362'.
[   89.956653][ T7242] netlink: 256 bytes leftover after parsing attributes in process `syz.2.363'.
[   89.988987][ T7243] netlink: 'syz.2.363': attribute type 10 has an invalid length.
[   89.992235][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'.
[   89.996576][ T7243] dummy0: entered promiscuous mode
[   90.000041][ T7243] bridge0: port 3(dummy0) entered blocking state
[   90.004824][ T7243] bridge0: port 3(dummy0) entered disabled state
[   90.007769][ T7243] dummy0: entered allmulticast mode
[   90.013183][ T7243] bridge0: port 3(dummy0) entered blocking state
[   90.015909][ T7243] bridge0: port 3(dummy0) entered forwarding state
[   90.020727][ T7243] netlink: 'syz.2.363': attribute type 10 has an invalid length.
[   90.025859][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'.
[   90.030871][ T7243] netlink: 'syz.2.363': attribute type 10 has an invalid length.
[   90.034080][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'.
[   90.039144][ T7243] netlink: 'syz.2.363': attribute type 10 has an invalid length.
[   90.042401][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'.
[   90.551409][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.598408][ T7270] netlink: 'syz.1.369': attribute type 8 has an invalid length.
[   91.020212][ T7304] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   92.853126][ T5820] Bluetooth: hci0: command tx timeout
[   92.922358][ T7374] netlink: 'syz.1.399': attribute type 21 has an invalid length.
[   93.649741][ T7402] netlink: 'syz.0.408': attribute type 4 has an invalid length.
[   94.076654][ T7414] netlink: 'syz.2.411': attribute type 10 has an invalid length.
[   94.085468][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.090185][ T7414] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   94.199768][ T7419] __nla_validate_parse: 1 callbacks suppressed
[   94.199779][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'.
[   94.698907][ T7438] netlink: 'syz.0.417': attribute type 15 has an invalid length.
[   94.708459][ T7441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.806116][ T7447] netlink: 268 bytes leftover after parsing attributes in process `syz.0.420'.
[   94.809025][ T7447] unsupported nla_type 65024
[   95.230973][ T7478] hsr0 speed is unknown, defaulting to 1000
[   95.291957][ T7482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.400693][ T7482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.807868][ T7482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.821552][ T7490] veth1_macvtap: left promiscuous mode
[   95.824968][ T7490] macsec0: entered promiscuous mode
[   95.869751][ T7482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.879806][ T7494] veth1_macvtap: entered promiscuous mode
[   95.882656][ T7494] macsec0: left promiscuous mode
[   96.006655][ T7496] netlink: 56 bytes leftover after parsing attributes in process `syz.1.433'.
[   96.009836][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.433'.
[   96.047166][ T5844] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.058837][ T5844] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.073738][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.087298][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.268496][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[   97.591528][ T7559] syzkaller0: entered promiscuous mode
[   97.594503][ T7559] syzkaller0: entered allmulticast mode
[   97.650578][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[   97.857201][ T7572] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   97.929565][ T7574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.944409][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.460'.
[   98.131978][ T7580] netlink: 'syz.1.461': attribute type 10 has an invalid length.
[   98.140554][ T7580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.461'.
[   98.286690][ T7587] delete_channel: no stack
[   98.393042][ T7594] block nbd2: server does not support multiple connections per device.
[   98.398024][ T7594] block nbd2: shutting down sockets
[   99.426804][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.438123][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'.
[   99.468596][ T7624] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.471'.
[   99.610853][ T7629] hsr0 speed is unknown, defaulting to 1000
[  100.679691][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[  100.838326][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'.
[  100.841830][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[  100.890290][ T7660] netlink: 'syz.2.479': attribute type 39 has an invalid length.
[  101.195628][ T7672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.200523][ T7672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.237564][ T7680] netlink: 44 bytes leftover after parsing attributes in process `syz.2.485'.
[  101.241014][ T7680] netlink: 43 bytes leftover after parsing attributes in process `syz.2.485'.
[  101.244577][ T7680] netlink: 'syz.2.485': attribute type 6 has an invalid length.
[  101.247073][ T7680] netlink: 43 bytes leftover after parsing attributes in process `syz.2.485'.
[  101.249877][ T7681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.485'.
[  101.254243][ T7681] netlink: 43 bytes leftover after parsing attributes in process `syz.2.485'.
[  101.257173][ T7681] netlink: 'syz.2.485': attribute type 6 has an invalid length.
[  101.272437][ T7672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.276394][ T7672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.370837][ T7672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.375242][ T7672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.439937][ T7672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.444482][ T7672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.528690][ T7694] netlink: 'syz.2.489': attribute type 30 has an invalid length.
[  101.534525][ T5880] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.537211][ T5880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.548140][ T5880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.550769][ T5880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.560089][ T5880] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.563007][ T5880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.572874][ T5880] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.575517][ T5880] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.036958][ T7712] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  102.595010][ T7748] netlink: 'syz.2.506': attribute type 9 has an invalid length.
[  103.168214][ T7785] hsr0 speed is unknown, defaulting to 1000
[  104.466859][ T7849] __nla_validate_parse: 10 callbacks suppressed
[  104.466880][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[  104.644494][ T7854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'.
[  104.744902][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'.
[  105.123485][ T7895] hsr0: entered promiscuous mode
[  105.131016][ T7895] netlink: 56 bytes leftover after parsing attributes in process `syz.1.538'.
[  105.457765][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'.
[  105.458429][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'.
[  105.461339][ T7909] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  105.480439][ T7910] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  105.801181][ T7932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  105.868425][ T7883] hsr0: left promiscuous mode
[  106.004442][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.557'.
[  106.286360][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'.
[  106.416107][ T7970] hsr0 speed is unknown, defaulting to 1000
[  106.542224][ T7971] hsr0 speed is unknown, defaulting to 1000
[  106.720315][ T7982] tipc: Started in network mode
[  106.722453][ T7982] tipc: Node identity ac14140f, cluster identity 4711
[  106.728061][ T7982] tipc: New replicast peer: 255.255.255.255
[  106.731212][ T7982] tipc: Enabled bearer <udp:syz2>, priority 10
[  107.240351][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[  107.770581][ T8045] syzkaller1: entered allmulticast mode
[  107.774607][ T8045] netlink: 'syz.1.578': attribute type 3 has an invalid length.
[  107.780216][ T8045] netlink: 'syz.1.578': attribute type 2 has an invalid length.
[  107.843874][    T9] tipc: Node number set to 2886997007
[  108.981016][ T8139] syzkaller1: entered promiscuous mode
[  108.984310][ T8139] syzkaller1: entered allmulticast mode
[  109.570177][ T8160] tipc: Trying to set illegal importance in message
[  109.754115][ T8175] tipc: Trying to set illegal importance in message
[  109.871706][ T8181] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  109.875783][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'.
[  109.879363][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'.
[  110.055268][ T8197] netlink: 124 bytes leftover after parsing attributes in process `syz.2.616'.
[  110.915197][ T8222] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[  110.917646][ T8222] netlink: 232 bytes leftover after parsing attributes in process `syz.1.625'.
[  111.163950][ T8228] block nbd2: server does not support multiple connections per device.
[  111.186359][ T8228] block nbd2: shutting down sockets
[  111.338029][ T8238] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  111.666439][ T8249] syzkaller1: entered promiscuous mode
[  111.668749][ T8249] syzkaller1: entered allmulticast mode
[  111.755542][ T8261] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  111.780645][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'.
[  112.724535][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'.
[  112.732592][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'.
[  112.740596][ T8286] netlink: 'syz.0.647': attribute type 14 has an invalid length.
[  112.915877][ T8297] syzkaller1: entered promiscuous mode
[  112.918220][ T8297] syzkaller1: entered allmulticast mode
[  112.971742][ T8292] syzkaller1: left promiscuous mode
[  112.974287][ T8292] syzkaller1: left allmulticast mode
[  113.094887][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'.
[  113.170256][ T8317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.656'.
[  113.462169][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  113.476481][ T8344] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.480222][ T8344] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.553094][ T8356] syzkaller1: entered promiscuous mode
[  113.555396][ T8356] syzkaller1: entered allmulticast mode
[  113.698701][ T8364] dummy0: left allmulticast mode
[  113.701530][ T8364] bridge0: port 3(dummy0) entered disabled state
[  113.715931][ T8364] bridge_slave_0: left allmulticast mode
[  113.718741][ T8364] bridge_slave_0: left promiscuous mode
[  113.722243][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.730913][ T8364] bridge_slave_1: left allmulticast mode
[  113.735984][ T8364] bridge_slave_1: left promiscuous mode
[  113.739747][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.757430][ T8364] bond0: (slave bond_slave_0): Releasing backup interface
[  113.776378][ T8364] bond0: (slave bond_slave_1): Releasing backup interface
[  113.787535][ T8378] netlink: 'syz.2.674': attribute type 9 has an invalid length.
[  113.796754][ T8364] team0: Port device team_slave_0 removed
[  113.807727][ T8364] team0: Port device team_slave_1 removed
[  113.813885][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.817146][ T8364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.824164][ T8364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.827395][ T8364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.985075][ T8407] syzkaller1: entered promiscuous mode
[  113.986873][ T8407] syzkaller1: entered allmulticast mode
[  114.386039][ T8424] netlink: 'syz.0.686': attribute type 8 has an invalid length.
[  114.686738][ T8440] openvswitch: netlink: Flow key attr not present in new flow.
[  114.920199][ T8455] openvswitch: netlink: IP tunnel TTL not specified.
[  115.266221][ T8471] syzkaller1: entered promiscuous mode
[  115.268073][ T8471] syzkaller1: entered allmulticast mode
[  115.303191][ T8476] block nbd2: server does not support multiple connections per device.
[  115.308658][ T8476] block nbd2: shutting down sockets
[  115.405566][ T5867] IPVS: starting estimator thread 0...
[  115.452557][ T8487] netlink: 'syz.2.703': attribute type 30 has an invalid length.
[  115.467002][ T8487] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  115.471623][ T8487] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  115.496265][ T8483] IPVS: using max 41 ests per chain, 98400 per kthread
[  115.600182][ T8493] syz.1.706: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  115.608966][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.1.706 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  115.608980][ T8493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.608986][ T8493] Call Trace:
[  115.608991][ T8493]  <TASK>
[  115.608996][ T8493]  dump_stack_lvl+0x189/0x250
[  115.609012][ T8493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.609021][ T8493]  ? __pfx__printk+0x10/0x10
[  115.609032][ T8493]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  115.609042][ T8493]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  115.609051][ T8493]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  115.609061][ T8493]  warn_alloc+0x214/0x310
[  115.609073][ T8493]  ? __pfx_warn_alloc+0x10/0x10
[  115.609086][ T8493]  ? __get_vm_area_node+0x28f/0x300
[  115.609099][ T8493]  ? xskq_create+0xbf/0x170
[  115.609112][ T8493]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  115.609134][ T8493]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  115.609144][ T8493]  ? __kasan_kmalloc+0x93/0xb0
[  115.609157][ T8493]  vmalloc_user_noprof+0xad/0xf0
[  115.609165][ T8493]  ? xskq_create+0xbf/0x170
[  115.609176][ T8493]  xskq_create+0xbf/0x170
[  115.609188][ T8493]  xsk_init_queue+0xb0/0x110
[  115.609199][ T8493]  xsk_setsockopt+0x57b/0x8d0
[  115.609210][ T8493]  ? __pfx_xsk_setsockopt+0x10/0x10
[  115.609220][ T8493]  ? __pfx_aa_sk_perm+0x10/0x10
[  115.609231][ T8493]  ? __fget_files+0x2a/0x420
[  115.609239][ T8493]  ? aa_sock_opt_perm+0x74/0x110
[  115.609251][ T8493]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  115.609260][ T8493]  ? __pfx_xsk_setsockopt+0x10/0x10
[  115.609270][ T8493]  do_sock_setsockopt+0x17c/0x1b0
[  115.609281][ T8493]  __x64_sys_setsockopt+0x13f/0x1b0
[  115.609292][ T8493]  do_syscall_64+0xfa/0x3b0
[  115.609303][ T8493]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.609314][ T8493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.609322][ T8493]  ? exc_page_fault+0x9f/0xf0
[  115.609333][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.609341][ T8493] RIP: 0033:0x7f12c5d8ebe9
[  115.609350][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.609358][ T8493] RSP: 002b:00007f12c6cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  115.609369][ T8493] RAX: ffffffffffffffda RBX: 00007f12c5fb5fa0 RCX: 00007f12c5d8ebe9
[  115.609375][ T8493] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  115.609380][ T8493] RBP: 00007f12c5e11e19 R08: 0000000000000004 R09: 0000000000000000
[  115.609385][ T8493] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  115.609390][ T8493] R13: 00007f12c5fb6038 R14: 00007f12c5fb5fa0 R15: 00007fff71dfdb38
[  115.609403][ T8493]  </TASK>
[  115.609407][ T8493] Mem-Info:
[  115.718402][ T8504] __nla_validate_parse: 8 callbacks suppressed
[  115.718419][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'.
[  115.725273][ T8493] active_anon:5089 inactive_anon:0 isolated_anon:0
[  115.725273][ T8493]  active_file:993 inactive_file:38229 isolated_file:0
[  115.725273][ T8493]  unevictable:1768 dirty:170 writeback:0
[  115.725273][ T8493]  slab_reclaimable:9602 slab_unreclaimable:54103
[  115.725273][ T8493]  mapped:18135 shmem:2445 pagetables:985
[  115.725273][ T8493]  sec_pagetables:0 bounce:0
[  115.725273][ T8493]  kernel_misc_reclaimable:0
[  115.725273][ T8493]  free:296731 free_pcp:22222 free_cma:0
[  115.744128][ T8493] Node 0 active_anon:10676kB inactive_anon:0kB active_file:2100kB inactive_file:3452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42696kB dirty:224kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6560kB pagetables:1876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  115.758320][ T8493] Node 1 active_anon:9748kB inactive_anon:0kB active_file:1872kB inactive_file:149464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29844kB dirty:456kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5520kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  115.773717][ T8493] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  115.786095][ T8493] lowmem_reserve[]: 0 814 814 814 814
[  115.788462][ T8493] Node 0 DMA32 free:429868kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10676kB inactive_anon:0kB active_file:2100kB inactive_file:3452kB unevictable:3536kB writepending:224kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:30880kB local_pcp:15144kB free_cma:0kB
[  115.822895][ T8493] lowmem_reserve[]: 0 0 0 0 0
[  115.824908][ T8493] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  115.845222][ T8493] lowmem_reserve[]: 0 0 854 854 854
[  115.847482][ T8493] Node 1 Normal free:282984kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9680kB inactive_anon:0kB active_file:1872kB inactive_file:149464kB unevictable:3536kB writepending:456kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:57796kB local_pcp:22036kB free_cma:0kB
[  115.863099][ T8493] lowmem_reserve[]: 0 0 0 0 0
[  115.865177][ T8493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  115.871998][ T8493] Node 0 DMA32: 403*4kB (UME) 306*8kB (UM) 199*16kB (UME) 157*32kB (UME) 112*64kB (UM) 44*128kB (UM) 19*256kB (UM) 7*512kB (UM) 7*1024kB (UME) 6*2048kB (UME) 92*4096kB (UM) = 429804kB
[  115.880499][ T8506] syzkaller1: entered promiscuous mode
[  115.881065][ T8493] Node 1 
[  115.883403][ T8506] syzkaller1: entered allmulticast mode
[  115.883710][ T8493] DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  115.897302][ T8493] Node 1 Normal: 628*4kB (UM) 239*8kB (UME) 50*16kB (UM) 13*32kB (M) 41*64kB (M) 34*128kB (ME) 31*256kB (UME) 16*512kB (UME) 10*1024kB (UME) 3*2048kB (UM) 58*4096kB (UM) = 282696kB
[  115.906138][ T8493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.910101][ T8493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.915802][ T8493] 41667 total pagecache pages
[  115.917980][ T8493] 0 pages in swap cache
[  115.920300][ T8493] Free swap  = 124996kB
[  115.922389][ T8493] Total swap = 124996kB
[  115.925157][ T8493] 786301 pages RAM
[  115.926760][ T8493] 0 pages HighMem/MovableOnly
[  115.928825][ T8493] 240546 pages reserved
[  115.930684][ T8493] 0 pages cma reserved
[  115.934129][ T8511] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  116.346577][ T8530] netlink: 65536 bytes leftover after parsing attributes in process `syz.2.716'.
[  116.355089][ T8530] netlink: 8668 bytes leftover after parsing attributes in process `syz.2.716'.
[  116.610492][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'.
[  117.024862][ T8559] netlink: 'syz.0.728': attribute type 1 has an invalid length.
[  117.060375][ T8559] bond1: entered promiscuous mode
[  117.065601][ T8559] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.336033][ T8571] netlink: 'syz.0.732': attribute type 7 has an invalid length.
[  117.339479][ T8571] netlink: 'syz.0.732': attribute type 8 has an invalid length.
[  117.342573][ T8571] netlink: 'syz.0.732': attribute type 4 has an invalid length.
[  117.346413][ T8571] netlink: 204 bytes leftover after parsing attributes in process `syz.0.732'.
[  117.482670][ T8577] syzkaller1: entered promiscuous mode
[  117.491732][ T8577] syzkaller1: entered allmulticast mode
[  117.597160][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'.
[  117.909161][ T8609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.745'.
[  117.962327][ T8614] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  117.967783][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  117.986157][ T8611] IPVS: length: 832 != 24
[  118.923386][ T8653] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'.
[  118.928263][ T8653] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'.
[  119.921981][ T8682] hsr0 speed is unknown, defaulting to 1000
[  120.961809][ T8755] __nla_validate_parse: 5 callbacks suppressed
[  120.961822][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'.
[  120.995049][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'.
[  121.036649][ T8761] netlink: 'syz.0.792': attribute type 3 has an invalid length.
[  121.101342][ T8768] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  121.110976][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.798'.
[  121.120787][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'.
[  121.129269][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'.
[  121.133891][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'.
[  122.101702][ T8789] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  122.551938][ T8820] sctp: [Deprecated]: syz.2.804 (pid 8820) Use of int in maxseg socket option.
[  122.551938][ T8820] Use struct sctp_assoc_value instead
[  122.994415][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.811'.
[  123.000769][ T8832] netlink: 'syz.0.811': attribute type 4 has an invalid length.
[  123.508422][ T8846] pim6reg: entered allmulticast mode
[  123.709888][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'.
[  123.714023][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'.
[  124.180876][ T8859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.256779][ T8859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.321555][ T8859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.423678][ T8859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.554418][ T5844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.566799][ T5844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.578755][ T5844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.605079][ T5844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.664013][ T8892] syzkaller1: entered promiscuous mode
[  125.666300][ T8892] syzkaller1: entered allmulticast mode
[  125.838787][ T8895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.832'.
[  126.089735][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'.
[  126.148446][ T8922] netlink: 'syz.0.841': attribute type 9 has an invalid length.
[  126.323593][ T8938] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  126.517394][ T8958] hsr0 speed is unknown, defaulting to 1000
[  127.364350][ T8991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.399343][ T8993] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  128.018442][ T9015] bridge6: entered promiscuous mode
[  128.453318][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.867'.
[  128.461605][ T9018] ieee802154 phy0 wpan0: encryption failed: -22
[  129.276442][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  129.290734][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.320727][ T9055] bridge_slave_1 (unregistering): left allmulticast mode
[  129.326614][ T9055] bridge_slave_1 (unregistering): left promiscuous mode
[  129.328951][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.344027][ T9060] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  129.347236][ T9060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  129.411687][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.880'.
[  131.462694][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[  131.482594][ T9115] bridge7: entered allmulticast mode
[  132.448441][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.451071][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.618289][ T9125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.900'.
[  133.261001][ T9145] netlink: 56 bytes leftover after parsing attributes in process `syz.0.904'.
[  133.282712][ T9141] syzkaller1: entered promiscuous mode
[  133.285073][ T9141] syzkaller1: entered allmulticast mode
[  134.370645][ T9170] hsr0 speed is unknown, defaulting to 1000
[  134.413702][   T47] IPVS: starting estimator thread 0...
[  134.502968][ T9174] IPVS: using max 58 ests per chain, 139200 per kthread
[  134.837612][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'.
[  134.849891][ T9197] netlink: 'syz.1.918': attribute type 1 has an invalid length.
[  135.058949][ T9205] syzkaller1: entered promiscuous mode
[  135.061480][ T9205] syzkaller1: entered allmulticast mode
[  135.098227][ T9202] syzkaller1: left promiscuous mode
[  135.100660][ T9202] syzkaller1: left allmulticast mode
[  135.395569][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'.
[  135.471579][ T9217] tipc: Started in network mode
[  135.475308][ T9217] tipc: Node identity fa4a8a7c0595, cluster identity 4711
[  135.480051][ T9217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.501611][ T9217] tipc: Disabling bearer <eth:syzkaller0>
[  135.800446][ T9228] hsr0 speed is unknown, defaulting to 1000
[  136.158856][ T9240] netlink: 14 bytes leftover after parsing attributes in process `syz.1.933'.
[  136.217342][ T9244] netlink: 248 bytes leftover after parsing attributes in process `syz.1.933'.
[  136.272276][ T9240] bond0 (unregistering): Released all slaves
[  136.606857][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  136.638397][ T9272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.943'.
[  136.842070][ T9285] syzkaller1: entered promiscuous mode
[  136.855392][ T9285] syzkaller1: entered allmulticast mode
[  137.036130][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'.
[  137.043507][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[  137.262216][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'.
[  137.347388][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.956'.
[  137.399624][ T9329] netlink: 'syz.0.957': attribute type 2 has an invalid length.
[  137.512559][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'.
[  138.061642][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'.
[  138.255466][ T9372] Illegal XDP return value 4294967274 on prog  (id 419) dev N/A, expect packet loss!
[  138.648020][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'.
[  138.680812][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'.
[  138.697927][ T9403] delete_channel: no stack
[  139.034117][ T9417] syzkaller1: entered promiscuous mode
[  139.039272][ T9417] syzkaller1: entered allmulticast mode
[  139.086903][ T9415] syzkaller1: left promiscuous mode
[  139.089390][ T9415] syzkaller1: left allmulticast mode
[  139.814935][ T9457] netlink: 'syz.2.997': attribute type 1 has an invalid length.
[  139.878335][ T9461] bond2: entered promiscuous mode
[  139.880471][ T9461] bond2: entered allmulticast mode
[  139.882709][ T9461] 8021q: adding VLAN 0 to HW filter on device bond2
[  139.915177][ T9457] bridge4: entered promiscuous mode
[  139.919439][ T9457] bridge4: entered allmulticast mode
[  139.925440][ T9457] bond2: (slave bridge4): Enslaving as a backup interface with an up link
[  139.994875][ T5880] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.009608][ T9457] bridge0: port 3(dummy0) entered disabled state
[  140.012681][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.106436][ T5880] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.251850][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.266690][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.385585][ T9457] tipc: Resetting bearer <eth:vlan0>
[  140.506119][    T9] hsr0 speed is unknown, defaulting to 1000
[  140.508263][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.511888][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.522196][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.527543][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.531142][    T9] syz2: Port: 1 Link DOWN
[  140.737376][ T9499] netlink: 'syz.1.1003': attribute type 10 has an invalid length.
[  140.741264][ T9499] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  140.747320][ T9499] openvswitch: netlink: Duplicate key (type 0).
[  140.990786][ T9520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.006038][ T9522] netlink: 'syz.2.1011': attribute type 11 has an invalid length.
[  141.829453][ T9541] syzkaller1: entered promiscuous mode
[  141.832032][ T9541] syzkaller1: entered allmulticast mode
[  142.042973][    C0] ==================================================================
[  142.046205][    C0] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  142.049476][    C0] Read of size 1 at addr ffff8880231dc7b0 by task syz-executor/5824
[  142.054397][    C0] 
[  142.055466][    C0] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  142.055485][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.055495][    C0] Call Trace:
[  142.055503][    C0]  <IRQ>
[  142.055510][    C0]  dump_stack_lvl+0x189/0x250
[  142.055530][    C0]  ? __kasan_check_byte+0x12/0x40
[  142.055572][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.055586][    C0]  ? lock_release+0x4b/0x3e0
[  142.055608][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  142.055626][    C0]  print_report+0xca/0x240
[  142.055644][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  142.055658][    C0]  kasan_report+0x118/0x150
[  142.055677][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  142.055693][    C0]  xfrm_state_find+0x2cf2/0x5400
[  142.055713][    C0]  ? xfrm_state_find+0x1da/0x5400
[  142.055728][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  142.055743][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  142.055768][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  142.055794][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  142.055810][    C0]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  142.055830][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  142.055847][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  142.055864][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  142.055881][    C0]  ? __run_timer_base+0x61a/0x860
[  142.055898][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  142.055916][    C0]  ? copy_process+0x1706/0x3c00
[  142.055936][    C0]  ? __lock_acquire+0xab9/0xd20
[  142.055954][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  142.055971][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  142.055988][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.056009][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  142.056021][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  142.056034][    C0]  ? icmp6_dst_alloc+0x3a5/0x420
[  142.056049][    C0]  ? icmp6_dst_alloc+0x3a5/0x420
[  142.056067][    C0]  ndisc_send_skb+0x41f/0x1440
[  142.056116][    C0]  ? ndisc_send_skb+0x20c/0x1440
[  142.056136][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  142.056155][    C0]  ? ndisc_alloc_skb+0x1a6/0x480
[  142.056176][    C0]  addrconf_rs_timer+0x369/0x670
[  142.056197][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  142.056216][    C0]  call_timer_fn+0x17e/0x5f0
[  142.056233][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  142.056249][    C0]  ? call_timer_fn+0xbe/0x5f0
[  142.056263][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  142.056284][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.056300][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.056315][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  142.056332][    C0]  __run_timer_base+0x61a/0x860
[  142.056347][    C0]  ? ktime_get+0x3e/0x1f0
[  142.056364][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  142.056385][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  142.056404][    C0]  run_timer_softirq+0xb7/0x180
[  142.056420][    C0]  handle_softirqs+0x286/0x870
[  142.056440][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  142.056460][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  142.056481][    C0]  __irq_exit_rcu+0xca/0x1f0
[  142.056497][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  142.056517][    C0]  irq_exit_rcu+0x9/0x30
[  142.056533][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  142.056551][    C0]  </IRQ>
[  142.056556][    C0]  <TASK>
[  142.056562][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  142.056577][    C0] RIP: 0010:__alloc_frozen_pages_noprof+0x15a/0x370
[  142.056596][    C0] Code: 8b 64 24 50 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 16 15 0d 00 44 89 f2 81 e2 00 08 00 00 83 3d 26 07 95 17 00 <0f> 84 dd 00 00 00 81 ca 00 01 00 00 0b 54 24 1c 89 54 24 1c 8b 7c
[  142.056609][    C0] RSP: 0018:ffffc900042df1c0 EFLAGS: 00000246
[  142.056625][    C0] RAX: 1ffff1100bfffb30 RBX: 0000000000000000 RCX: 0000000000000000
[  142.056634][    C0] RDX: 0000000000000800 RSI: dffffc0000000000 RDI: ffffc900042df220
[  142.056644][    C0] RBP: ffffc900042df2b0 R08: 0000000000000000 R09: ffffffff8215895d
[  142.056654][    C0] R10: ffffc900042df200 R11: fffff5200085be45 R12: ffff88805fffd980
[  142.056665][    C0] R13: 1ffff9200085be3c R14: 0000000000440dc0 R15: dffffc0000000000
[  142.056678][    C0]  ? fs_reclaim_acquire+0x7d/0x100
[  142.056695][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  142.056716][    C0]  alloc_pages_mpol+0x232/0x4a0
[  142.056740][    C0]  alloc_pages_noprof+0xa9/0x190
[  142.056759][    C0]  pte_alloc_one+0x21/0x170
[  142.056774][    C0]  __pte_alloc+0x25/0x1a0
[  142.056790][    C0]  copy_pmd_range+0x68e6/0x7000
[  142.056812][    C0]  ? arch_stack_walk+0xfc/0x150
[  142.056837][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  142.056864][    C0]  copy_page_range+0xc46/0x1270
[  142.056880][    C0]  ? __lock_acquire+0xab9/0xd20
[  142.056906][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  142.056925][    C0]  ? up_write+0x1c4/0x420
[  142.056937][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  142.056956][    C0]  dup_mmap+0xf57/0x1ac0
[  142.056975][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  142.056992][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  142.057006][    C0]  ? mm_init+0xcc3/0xef0
[  142.057029][    C0]  copy_mm+0x13c/0x4b0
[  142.057044][    C0]  copy_process+0x1706/0x3c00
[  142.057091][    C0]  ? copy_process+0x97f/0x3c00
[  142.057109][    C0]  ? __pfx_copy_process+0x10/0x10
[  142.057126][    C0]  kernel_clone+0x21e/0x840
[  142.057143][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  142.057164][    C0]  __x64_sys_clone+0x18b/0x1e0
[  142.057179][    C0]  ? count_memcg_event_mm+0x21/0x260
[  142.057198][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  142.057219][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  142.057239][    C0]  ? do_syscall_64+0xbe/0x3b0
[  142.057260][    C0]  do_syscall_64+0xfa/0x3b0
[  142.057280][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.057298][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.057313][    C0]  ? exc_page_fault+0x9f/0xf0
[  142.057332][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.057346][    C0] RIP: 0033:0x7f2b59585453
[  142.057361][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  142.057373][    C0] RSP: 002b:00007ffc39d3ca88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  142.057395][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b59585453
[  142.057405][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  142.057412][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  142.057420][    C0] R10: 0000555591e457d0 R11: 0000000000000246 R12: 0000000000000000
[  142.057429][    C0] R13: 00000000000927c0 R14: 0000000000022a50 R15: 00007ffc39d3cc20
[  142.057442][    C0]  </TASK>
[  142.057448][    C0] 
[  142.324391][    C0] Allocated by task 7059:
[  142.326229][    C0]  kasan_save_track+0x3e/0x80
[  142.328211][    C0]  __kasan_slab_alloc+0x6c/0x80
[  142.330216][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  142.332405][    C0]  xfrm_state_alloc+0x24/0x2f0
[  142.334438][    C0]  __find_acq_core+0x8a7/0x1c00
[  142.336462][    C0]  xfrm_find_acq+0x78/0xa0
[  142.338384][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  142.340536][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  142.342831][    C0]  netlink_rcv_skb+0x208/0x470
[  142.344824][    C0]  xfrm_netlink_rcv+0x79/0x90
[  142.346735][    C0]  netlink_unicast+0x82f/0x9e0
[  142.348712][    C0]  netlink_sendmsg+0x805/0xb30
[  142.350801][    C0]  __sock_sendmsg+0x21c/0x270
[  142.352867][    C0]  ____sys_sendmsg+0x505/0x830
[  142.354978][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  142.357025][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  142.359237][    C0]  do_syscall_64+0xfa/0x3b0
[  142.361102][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.363441][    C0] 
[  142.364455][    C0] Freed by task 5867:
[  142.366177][    C0]  kasan_save_track+0x3e/0x80
[  142.368258][    C0]  kasan_save_free_info+0x46/0x50
[  142.370466][    C0]  __kasan_slab_free+0x62/0x70
[  142.372587][    C0]  kmem_cache_free+0x18f/0x400
[  142.374582][    C0]  xfrm_state_gc_task+0x518/0x6a0
[  142.376610][    C0]  process_scheduled_works+0xae1/0x17b0
[  142.378804][    C0]  worker_thread+0x8a0/0xda0
[  142.380647][    C0]  kthread+0x711/0x8a0
[  142.382323][    C0]  ret_from_fork+0x3fc/0x770
[  142.384276][    C0]  ret_from_fork_asm+0x1a/0x30
[  142.386340][    C0] 
[  142.387457][    C0] The buggy address belongs to the object at ffff8880231dc480
[  142.387457][    C0]  which belongs to the cache xfrm_state of size 928
[  142.393354][    C0] The buggy address is located 816 bytes inside of
[  142.393354][    C0]  freed 928-byte region [ffff8880231dc480, ffff8880231dc820)
[  142.398900][    C0] 
[  142.399907][    C0] The buggy address belongs to the physical page:
[  142.402680][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880231dc000 pfn:0x231dc
[  142.407158][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  142.410672][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  142.413779][    C0] page_type: f5(slab)
[  142.415537][    C0] raw: 00fff00000000040 ffff8881000cd640 dead000000000122 0000000000000000
[  142.419292][    C0] raw: ffff8880231dc000 00000000800e000c 00000000f5000000 0000000000000000
[  142.422934][    C0] head: 00fff00000000040 ffff8881000cd640 dead000000000122 0000000000000000
[  142.426493][    C0] head: ffff8880231dc000 00000000800e000c 00000000f5000000 0000000000000000
[  142.430008][    C0] head: 00fff00000000002 ffffea00008c7701 00000000ffffffff 00000000ffffffff
[  142.433510][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  142.437252][    C0] page dumped because: kasan: bad access detected
[  142.440081][    C0] page_owner tracks the page as allocated
[  142.442446][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6611, tgid 6610 (syz.0.177), ts 75339311758, free_ts 75318774281
[  142.450057][    C0]  post_alloc_hook+0x240/0x2a0
[  142.452281][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  142.454796][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  142.457218][    C0]  alloc_pages_mpol+0x232/0x4a0
[  142.459198][    C0]  allocate_slab+0x8a/0x3b0
[  142.461017][    C0]  ___slab_alloc+0xbfc/0x1480
[  142.462916][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  142.465204][    C0]  xfrm_state_alloc+0x24/0x2f0
[  142.467302][    C0]  xfrm_add_sa+0x17d1/0x4070
[  142.469374][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  142.471511][    C0]  netlink_rcv_skb+0x208/0x470
[  142.473638][    C0]  xfrm_netlink_rcv+0x79/0x90
[  142.475610][    C0]  netlink_unicast+0x82f/0x9e0
[  142.477580][    C0]  netlink_sendmsg+0x805/0xb30
[  142.479571][    C0]  __sock_sendmsg+0x21c/0x270
[  142.481572][    C0]  ____sys_sendmsg+0x505/0x830
[  142.483703][    C0] page last free pid 6608 tgid 6605 stack trace:
[  142.486655][    C0]  __free_frozen_pages+0xc71/0xe70
[  142.488885][    C0]  stack_depot_save_flags+0x445/0x900
[  142.491163][    C0]  ref_tracker_free+0xfe/0x7d0
[  142.493191][    C0]  __sk_destruct+0x3c3/0x660
[  142.495085][    C0]  vsock_release+0x99/0x100
[  142.496936][    C0]  sock_close+0xc3/0x240
[  142.498738][    C0]  __fput+0x44c/0xa70
[  142.500475][    C0]  task_work_run+0x1d4/0x260
[  142.502575][    C0]  do_exit+0x6b5/0x22e0
[  142.504407][    C0]  do_group_exit+0x21c/0x2d0
[  142.506327][    C0]  get_signal+0x1286/0x1340
[  142.508193][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  142.510472][    C0]  exit_to_user_mode_loop+0x75/0x110
[  142.512594][    C0]  ret_from_fork+0x47f/0x770
[  142.514465][    C0]  ret_from_fork_asm+0x1a/0x30
[  142.516508][    C0] 
[  142.517570][    C0] Memory state around the buggy address:
[  142.520064][    C0]  ffff8880231dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.523384][    C0]  ffff8880231dc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.526564][    C0] >ffff8880231dc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.529826][    C0]                                      ^
[  142.532257][    C0]  ffff8880231dc800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  142.535667][    C0]  ffff8880231dc880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.539158][    C0] ==================================================================
[  142.542752][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  142.545729][    C0] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  142.551178][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.555496][    C0] Call Trace:
[  142.556847][    C0]  <IRQ>
[  142.558051][    C0]  dump_stack_lvl+0x99/0x250
[  142.559928][    C0]  ? __asan_memcpy+0x40/0x70
[  142.561793][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.564006][    C0]  ? __pfx__printk+0x10/0x10
[  142.566126][    C0]  panic+0x2db/0x790
[  142.567850][    C0]  ? __pfx_panic+0x10/0x10
[  142.569826][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  142.572267][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.574697][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.577283][    C0]  ? print_memory_metadata+0x314/0x400
[  142.579524][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  142.581604][    C0]  check_panic_on_warn+0x89/0xb0
[  142.583748][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  142.586053][    C0]  end_report+0x78/0x160
[  142.587932][    C0]  kasan_report+0x129/0x150
[  142.589905][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  142.591953][    C0]  xfrm_state_find+0x2cf2/0x5400
[  142.593967][    C0]  ? xfrm_state_find+0x1da/0x5400
[  142.595956][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  142.598131][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  142.600535][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  142.603424][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  142.605996][    C0]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  142.608510][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  142.611260][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  142.613805][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  142.616468][    C0]  ? __run_timer_base+0x61a/0x860
[  142.618733][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  142.621451][    C0]  ? copy_process+0x1706/0x3c00
[  142.623574][    C0]  ? __lock_acquire+0xab9/0xd20
[  142.625635][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  142.627876][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  142.630106][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.632247][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  142.634751][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  142.636960][    C0]  ? icmp6_dst_alloc+0x3a5/0x420
[  142.639113][    C0]  ? icmp6_dst_alloc+0x3a5/0x420
[  142.641221][    C0]  ndisc_send_skb+0x41f/0x1440
[  142.643187][    C0]  ? ndisc_send_skb+0x20c/0x1440
[  142.645194][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  142.647252][    C0]  ? ndisc_alloc_skb+0x1a6/0x480
[  142.649254][    C0]  addrconf_rs_timer+0x369/0x670
[  142.651353][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  142.653710][    C0]  call_timer_fn+0x17e/0x5f0
[  142.655729][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  142.658194][    C0]  ? call_timer_fn+0xbe/0x5f0
[  142.660147][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  142.662262][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.664420][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.666633][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  142.668917][    C0]  __run_timer_base+0x61a/0x860
[  142.670945][    C0]  ? ktime_get+0x3e/0x1f0
[  142.672837][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  142.675187][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  142.677908][    C0]  run_timer_softirq+0xb7/0x180
[  142.680045][    C0]  handle_softirqs+0x286/0x870
[  142.682028][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  142.683986][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  142.686209][    C0]  __irq_exit_rcu+0xca/0x1f0
[  142.688115][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  142.690317][    C0]  irq_exit_rcu+0x9/0x30
[  142.692069][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  142.694456][    C0]  </IRQ>
[  142.695758][    C0]  <TASK>
[  142.697070][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  142.699586][    C0] RIP: 0010:__alloc_frozen_pages_noprof+0x15a/0x370
[  142.702296][    C0] Code: 8b 64 24 50 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 16 15 0d 00 44 89 f2 81 e2 00 08 00 00 83 3d 26 07 95 17 00 <0f> 84 dd 00 00 00 81 ca 00 01 00 00 0b 54 24 1c 89 54 24 1c 8b 7c
[  142.709893][    C0] RSP: 0018:ffffc900042df1c0 EFLAGS: 00000246
[  142.712714][    C0] RAX: 1ffff1100bfffb30 RBX: 0000000000000000 RCX: 0000000000000000
[  142.716068][    C0] RDX: 0000000000000800 RSI: dffffc0000000000 RDI: ffffc900042df220
[  142.719234][    C0] RBP: ffffc900042df2b0 R08: 0000000000000000 R09: ffffffff8215895d
[  142.722531][    C0] R10: ffffc900042df200 R11: fffff5200085be45 R12: ffff88805fffd980
[  142.725952][    C0] R13: 1ffff9200085be3c R14: 0000000000440dc0 R15: dffffc0000000000
[  142.729386][    C0]  ? fs_reclaim_acquire+0x7d/0x100
[  142.731630][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  142.734252][    C0]  alloc_pages_mpol+0x232/0x4a0
[  142.736311][    C0]  alloc_pages_noprof+0xa9/0x190
[  142.738489][    C0]  pte_alloc_one+0x21/0x170
[  142.740443][    C0]  __pte_alloc+0x25/0x1a0
[  142.742300][    C0]  copy_pmd_range+0x68e6/0x7000
[  142.744294][    C0]  ? arch_stack_walk+0xfc/0x150
[  142.746299][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  142.748370][    C0]  copy_page_range+0xc46/0x1270
[  142.750320][    C0]  ? __lock_acquire+0xab9/0xd20
[  142.752316][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  142.754493][    C0]  ? up_write+0x1c4/0x420
[  142.756330][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  142.759089][    C0]  dup_mmap+0xf57/0x1ac0
[  142.760848][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  142.762756][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  142.765133][    C0]  ? mm_init+0xcc3/0xef0
[  142.766926][    C0]  copy_mm+0x13c/0x4b0
[  142.768735][    C0]  copy_process+0x1706/0x3c00
[  142.770863][    C0]  ? copy_process+0x97f/0x3c00
[  142.773032][    C0]  ? __pfx_copy_process+0x10/0x10
[  142.775145][    C0]  kernel_clone+0x21e/0x840
[  142.777039][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  142.779055][    C0]  __x64_sys_clone+0x18b/0x1e0
[  142.781032][    C0]  ? count_memcg_event_mm+0x21/0x260
[  142.783321][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  142.785629][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  142.787956][    C0]  ? do_syscall_64+0xbe/0x3b0
[  142.790129][    C0]  do_syscall_64+0xfa/0x3b0
[  142.792050][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.794209][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.796700][    C0]  ? exc_page_fault+0x9f/0xf0
[  142.798620][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.801102][    C0] RIP: 0033:0x7f2b59585453
[  142.803150][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  142.810896][    C0] RSP: 002b:00007ffc39d3ca88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  142.814199][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b59585453
[  142.817385][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  142.820510][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  142.823680][    C0] R10: 0000555591e457d0 R11: 0000000000000246 R12: 0000000000000000
[  142.826422][    C0] R13: 00000000000927c0 R14: 0000000000022a50 R15: 00007ffc39d3cc20
[  142.829310][    C0]  </TASK>
[  142.830904][    C0] Kernel Offset: disabled
[  142.832633][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:53:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006ad0
R8 =ffff888108a00237 R9 =1ffff11021140046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95916 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555591e45500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b5a2e56c0 CR3=00000000282f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fec87812e53
XMM06=0000000000000000 00007fec87812e4d XMM07=0000000000000000 00007fec87812e61
XMM08=0000000000000000 00007fec87812ee7 XMM09=0000000000000000 00007fec87812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b42e4f RBX=ffffc9000362fae8 RCX=ffff8880287cb980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000362fb90 RSP=ffffc9000362faa0
R8 =ffffffff8fa07bf7 R9 =1ffffffff1f40f7e R10=dffffc0000000000 R11=ffffffff81706100
R12=1ffff920006c5f5d R13=dffffc0000000000 R14=1ffff920006c5f58 R15=1ffff920006c5f58
RIP=ffffffff81b42e39 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556a17e500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f12c6ae56c0 CR3=0000000034cba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f12c5e12e53
XMM06=0000000000000000 00007f12c5e12e4d XMM07=0000000000000000 00007f12c5e12e61
XMM08=0000000000000000 00007f12c5e12ee7 XMM09=0000000000000000 00007f12c5e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
