last executing test programs:

1.239320151s ago: executing program 0 (id=1243):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="64020000100001000000000000000000fc01f8d30fa111ca4f45000011000005000000000075b1d0fd86f74db500000000080000002f00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="05000000000000000500000000000000be380000000000000300000000000000f9ffffffffffffff2902000000000000000000000000000000080000000000002c00000000000000080000000000000006000000000000007f0000000000000001010000000000000000030300000000"], 0x264}}, 0x0)

1.238860431s ago: executing program 1 (id=1244):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000280)=@generic, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)=""/246, 0xf6}], 0x1, &(0x7f0000000700)=""/142, 0x8e}, 0x40000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2503000000050003000400000005000300f2000000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x1e, 0x17}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x1e, 0x17}})
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000de3f0000082dbd7000e6f6df251a7c020004004580ba9700f46fac5ddeb8e71121745a4ff5d5e2ff3a6673f8be0eaaef7ffa79d44584ea2d96774c3ee73a4e1b9f781e8a219304059f47ab0989dcdcd45d52e4296dc0b8cb6e3bb5"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000de3f0000082dbd7000e6f6df251a7c020004004580ba9700f46fac5ddeb8e71121745a4ff5d5e2ff3a6673f8be0eaaef7ffa79d44584ea2d96774c3ee73a4e1b9f781e8a219304059f47ab0989dcdcd45d52e4296dc0b8cb6e3bb5"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x1, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x1, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000080000000000000000d16000006b3a7401f3c0d92ee6ffffffffffffff0019ce00"/46, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000290d00000000000000000000000000000a00010000000000000000001c0017000000000000000000000000000000001000000000000000004800010073686132353600"/268], 0x154}}, 0x0)

1.099230913s ago: executing program 0 (id=1245):
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01007c34561b018fbacbe7f698bbe18e7d00000080fbdbdf25250000000e00400000007464657673696d0000000f0f711174c96b34afb66198f7547d97394d7412e47a747acbc0a0a3e68545856cacecf2b22d6e17209d71446468e8912a4d47948f921bfee60f055a23a606c4a90fca19f9c8fc5e79c0a503bb7c8d2fb2cd556fa065dd405cd9ba2a4c99a7834757d18c382067f55e8a6be22a1e1da1bd67bb1cd3443623ef4754af73f2fd519617fecafe9528411fea237f6548c16776753d3a7e539b"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a010400000000000000000200000058000480540001800b00010065787468647200004400028005000200830000000800034000000000080004400000003208000640000000020800014000000008080005400000000108000540d052aec108000640000000020900010073797a30000000000900020073797a32"], 0x6034}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xc0000000}]}}]}, 0x38}}, 0x44080)
sendmmsg$sock(r5, &(0x7f0000003640), 0x0, 0x20040059)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r10=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r10, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

368.306012ms ago: executing program 2 (id=1251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x14000000, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)

368.171183ms ago: executing program 1 (id=1252):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000440)="ac093296", 0x4}], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

367.790524ms ago: executing program 2 (id=1253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffe5b, &(0x7f00000012c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10)
r4 = socket(0x2, 0x80805, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x7, 0x4)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="26d662065982c14574304c5316d418a15b1819c08e5f27f52ae9ae7198fbc09a5909fd07ca56a4cf992549e9d8e8a38d7245f06bf288838ca2af218bef64a1e5b1142bc480683c51529c7608ab3b406a72b79c7b4b202a96b672fbb3df6e7e64b7"], 0x1c}}, 0x24044080)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000013c0)='cachefiles_vfs_error\x00', r7}, 0x18)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r9, &(0x7f0000000200)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020de8ef96b6f08eec511ca0cf737fd0600a2096b5f14a6d8db8acc92b27792da0000000000000003ffc838f7dc77a51e2647468af12c4365c4a4a673e9a96698f29f88134000f4fa8fcea5afe4d5fe8216acc030c6a59564acbfa2db246a2b07cb7676eded1c4c", 0x80, 0x20000805, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r9, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x18, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000001800000000000009408000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018240000", @ANYRES32=r10, @ANYBLOB="0000e4000000000000000000181200"/28, @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="110000000000000000100000", @ANYRES32=r10, @ANYRES32=r10, @ANYRES64=0x0], 0x20)
recvmsg$can_raw(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001040)=""/102, 0x66}, {&(0x7f0000001100)=""/121, 0x79}], 0x2, &(0x7f00000011c0)=""/173, 0xad}, 0x34117f29dc65b78e)

329.470937ms ago: executing program 1 (id=1254):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000fec0ffffffffffff08000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

329.213632ms ago: executing program 1 (id=1255):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x480, @remote}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000e6fe60ce2cbe875268eaedb08252839c30e48f0000000000"], 0x54}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x9, 0x4)
r5 = socket(0x25, 0x1, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'macvtap0\x00', {0x2, 0x4e22, @private=0xa0100fe}})
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x400}, {0xa, 0x208, 0x0, @empty}, 0x2, {[0x2, 0x401, 0xfffffffe, 0x7, 0x0, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x4, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x4e22, 0x800, @empty, 0x59}, 0x3, {[0x0, 0x7]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x8, 0x0, @private2, 0x7}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x80000000, 0x7, 0x8, 0x1, 0x7]}}, 0x5c)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYRES32=r0], 0x10bc}, 0x1, 0x0, 0x0, 0x4000045}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

326.289214ms ago: executing program 2 (id=1260):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000440)="ac093296", 0x4}], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

259.542349ms ago: executing program 1 (id=1256):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00030000060a010400000000000000000a0000010900010073797a3100000000d4020480d00201800a0001006d61746368000000c00202800e000100636f6e6e6c696d69740000000a00010071756f746100000053000300524fe5f7bfa25e1e47f1c3117c2eae4a49645f9b7406df29429e67f9ddc94aa356735e7babefb4578cf664e11b402b55e7b9d16bfca2d8afc172001988423a8762760891d68cab90ac84fe41a3e116000800024000000001da0003002409bb5468e4f70765c9bcb52a477bfaf974f96d6b0a7833dec945cb62643cfbd9bbd4e3d37640a10fb588a4caba4e8ae63304e3e6bac6df94b98fa8d712744782b3dc22a002194edfe83c86e6b1c50590a0975f5258a81f2d96486c39fb026106a671c9c4c094bb27be60c53487eba7a5ef3c093f5ae446e8883d13fb259f717d516b3c61db4901277716024c2967992f9031459766cf4f9507759a687b2f3c908c2c061e0b5de8e1275832ffcd0f8f412b97c22b44b6dfcd244617fe50403668ab8f0783f9daf2c9472129661f69fc56b067f25d8b00000800024000000003c2000300c26a1f0623dee8c8edb605bce29840447a3d0e5bf1ff02a634342f0ab3ae0b89bebcdd0fe8e052a8151ab5ca6fe43472c04f01ef85eab6e87f3821f3fc408f9a9908b36b403e446e9b71f50bb21242fb44bd35081e7cc810d01928fe186571372a179088eddac0ea62b8cabf01e1b069b405ee87a2d510f7d111d8ed2dc26bbe5260a5e6386db6d6e02feaa0d5317eebcc6196b4acf373f00169b4c03b4a90cf42da9fc310c300aab79a7658fbfc6e8977bf4f96fc2ae8e939ed007228d50000080002400000000094000300c167cc561df986b646e75dc4ec1f875c52562e49ccc52f75c319802ca24b7f96e049c940178515da05c344eb9b67eb75d3fd3d8c4b85bb4ed940e5aca75b286b9e82f06e1fa93d0954a1d958e2a39985001f027b30557f7d94694e221768e7fe7c77e2bd1bf2b8712829eb90242718dbf8546705f613d520dac4673c327248ca266b59c787a922d46c1444e9cfa7d5690900020073797a3200"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000000ff"], 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, &(0x7f0000000180), r4, 0x0, 0x2000000000004, 0xa)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, 0x1c)
bind$netrom(r5, &(0x7f0000000200)={{0x3, @bcast, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x14c, 0x18, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x5c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x80, 0x60, "1f43c32f93d843858ab361d2f68b7dd8"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

258.737587ms ago: executing program 0 (id=1257):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00383a00fe880000000000000000000000000001ff020000000000400000000000000001"], 0x0)

257.89589ms ago: executing program 2 (id=1258):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000379733582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x541b, &(0x7f0000000000)={0x29, 0xabe, 0x8, 0xa, 0xffffff80})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c00125704", 0x30}], 0x1}, 0x0)
getpeername(r1, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80)

236.460228ms ago: executing program 0 (id=1259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x16000000, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)

168.816789ms ago: executing program 2 (id=1261):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000e0ffffffffffffff08000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

167.96075ms ago: executing program 1 (id=1262):
unshare(0x6a040000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8)
unshare(0x26020480)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xc, 0x4, 0x2b0, 0xffffffff, 0x118, 0x118, 0x90, 0x98, 0xffffffff, 0x248, 0x248, 0x248, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="2f0000000000b50cb403a51a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r7, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0)
recvmsg(r8, &(0x7f0000000e40)={&(0x7f0000000840)=@rc, 0x80, &(0x7f0000000e00)}, 0x2)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket(0x2b, 0x80801, 0x1)

167.309478ms ago: executing program 0 (id=1263):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xfffffb3a}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x0, 0x5}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x12af0000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)
r4 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0)
ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000000))

166.995812ms ago: executing program 2 (id=1264):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
r2 = socket(0x10, 0x2, 0x0) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008004) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x62040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840) (async)
listen(0xffffffffffffffff, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async)
unshare(0x64000600)

0s ago: executing program 0 (id=1265):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_timeval(r1, 0x1, 0x33, &(0x7f0000abaff9)={0x77359400}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14995' (ED25519) to the list of known hosts.
syzkaller login: [   48.167365][ T5750] cgroup: Unknown subsys name 'net'
[   48.299862][ T5750] cgroup: Unknown subsys name 'cpuset'
[   48.306142][ T5750] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.913021][ T5750] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.761609][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.764621][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.786259][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.789818][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.793697][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.794057][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.797937][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.802752][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.803325][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.806279][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.809349][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.814262][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.815682][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.826277][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.831189][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.091900][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   54.158667][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.224088][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.226964][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.229329][ T5818] bridge_slave_0: entered allmulticast mode
[   54.232020][ T5818] bridge_slave_0: entered promiscuous mode
[   54.243032][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.245803][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.248463][ T5818] bridge_slave_1: entered allmulticast mode
[   54.251366][ T5818] bridge_slave_1: entered promiscuous mode
[   54.254588][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   54.310438][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.312908][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.316571][ T5827] bridge_slave_0: entered allmulticast mode
[   54.320275][ T5827] bridge_slave_0: entered promiscuous mode
[   54.338974][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.345747][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.362653][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.365174][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.368512][ T5827] bridge_slave_1: entered allmulticast mode
[   54.372399][ T5827] bridge_slave_1: entered promiscuous mode
[   54.417354][ T5818] team0: Port device team_slave_0 added
[   54.432502][ T5818] team0: Port device team_slave_1 added
[   54.446920][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.464597][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.513448][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.517867][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.520996][ T5820] bridge_slave_0: entered allmulticast mode
[   54.524725][ T5820] bridge_slave_0: entered promiscuous mode
[   54.529615][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.532541][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.537548][ T5820] bridge_slave_1: entered allmulticast mode
[   54.541249][ T5820] bridge_slave_1: entered promiscuous mode
[   54.544863][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.547920][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.558458][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.566331][ T5827] team0: Port device team_slave_0 added
[   54.578371][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.581307][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.591960][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.598335][ T5827] team0: Port device team_slave_1 added
[   54.646228][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.650429][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.653329][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.663809][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.670114][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.672931][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.683827][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.710113][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.747412][ T5818] hsr_slave_0: entered promiscuous mode
[   54.750610][ T5818] hsr_slave_1: entered promiscuous mode
[   54.793982][ T5820] team0: Port device team_slave_0 added
[   54.798894][ T5820] team0: Port device team_slave_1 added
[   54.808032][ T5827] hsr_slave_0: entered promiscuous mode
[   54.810334][ T5827] hsr_slave_1: entered promiscuous mode
[   54.812959][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   54.815582][ T5827] Cannot create hsr debugfs directory
[   54.861653][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.864502][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.876524][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.900665][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.903574][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.914994][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.041850][ T5820] hsr_slave_0: entered promiscuous mode
[   55.046851][ T5820] hsr_slave_1: entered promiscuous mode
[   55.049750][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   55.052141][ T5820] Cannot create hsr debugfs directory
[   55.252779][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.265398][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.282051][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.292143][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.333647][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.338250][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.347969][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.363369][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.409504][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.416937][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.424261][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.435976][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.518026][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.542943][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.560864][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   55.580838][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.587989][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.591142][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.606553][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.609194][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.616663][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.619563][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.628666][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.631002][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.686275][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.730671][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   55.750965][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.753777][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.758629][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.761505][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.825169][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.846824][ T5829] Bluetooth: hci1: command tx timeout
[   55.849159][ T5829] Bluetooth: hci0: command tx timeout
[   55.851371][ T5829] Bluetooth: hci2: command tx timeout
[   55.891218][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.937765][ T5827] veth0_vlan: entered promiscuous mode
[   55.951758][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.960059][ T5827] veth1_vlan: entered promiscuous mode
[   56.000367][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.009386][ T5827] veth0_macvtap: entered promiscuous mode
[   56.021723][ T5827] veth1_macvtap: entered promiscuous mode
[   56.044032][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.050562][ T5818] veth0_vlan: entered promiscuous mode
[   56.059534][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.073233][ T5818] veth1_vlan: entered promiscuous mode
[   56.083260][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.088163][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.101280][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.111193][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.124020][ T5820] veth0_vlan: entered promiscuous mode
[   56.154126][ T5820] veth1_vlan: entered promiscuous mode
[   56.178369][ T5818] veth0_macvtap: entered promiscuous mode
[   56.182332][ T5818] veth1_macvtap: entered promiscuous mode
[   56.194069][ T5820] veth0_macvtap: entered promiscuous mode
[   56.219743][ T5820] veth1_macvtap: entered promiscuous mode
[   56.224476][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.225897][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.230388][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.244791][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.267469][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.280727][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.282201][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.284079][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.290377][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.294375][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.302259][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.320331][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.323971][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.346399][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.357538][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.375310][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.377922][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.430352][ T2247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.432977][ T2247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.437501][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.467665][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.470910][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.472390][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.480531][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.525158][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.529149][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.609568][ T5894] Zero length message leads to an empty skb
[   56.719816][ T5900] sctp: [Deprecated]: syz.0.6 (pid 5900) Use of int in max_burst socket option deprecated.
[   56.719816][ T5900] Use struct sctp_assoc_value instead
[   56.823167][ T5905] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   56.845954][ T5904] IPv6: NLM_F_CREATE should be specified when creating new route
[   57.694370][ T5943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.930745][ T5217] Bluetooth: hci2: command tx timeout
[   57.933424][ T5829] Bluetooth: hci0: command tx timeout
[   57.933447][ T5824] Bluetooth: hci1: command tx timeout
[   57.947764][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'.
[   58.108584][ T5965] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.113310][ T5965] netlink: 'syz.0.27': attribute type 8 has an invalid length.
[   58.497631][ T5981] netlink: 'syz.0.35': attribute type 3 has an invalid length.
[   58.517963][ T5981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.849787][ T5991] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET)
[   59.038337][ T5981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.119116][ T5981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.227530][ T5981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.312971][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.352470][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.359007][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.380332][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.570712][ T5943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.901679][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.958268][ T5943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.984706][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.005344][ T5824] Bluetooth: hci1: command tx timeout
[   60.005768][ T5217] Bluetooth: hci2: command tx timeout
[   60.009539][ T5829] Bluetooth: hci0: command tx timeout
[   60.024746][ T5943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.081898][ T6060] IPv6: NLM_F_CREATE should be specified when creating new route
[   60.082038][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.126000][ T5870] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.130514][ T5870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.144410][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.157798][ T5870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.180681][ T5870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.253414][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.280136][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'.
[   60.284296][ T5850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.293433][ T5850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.318724][ T5850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.393021][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'.
[   60.569307][ T6103] netlink: 277 bytes leftover after parsing attributes in process `syz.0.74'.
[   60.674790][   T33] audit: type=1800 audit(1754304773.067:2): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.71" name="cgroup.controllers" dev="tmpfs" ino=145 res=0 errno=0
[   60.872497][ T6135] netlink: 104 bytes leftover after parsing attributes in process `syz.1.85'.
[   61.218666][ T6133] syz.2.82 (6133) used greatest stack depth: 18328 bytes left
[   61.790082][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'.
[   61.975738][ T6282] netlink: 'syz.1.105': attribute type 16 has an invalid length.
[   62.089573][ T5829] Bluetooth: hci0: command tx timeout
[   62.091967][ T5829] Bluetooth: hci2: command tx timeout
[   62.094248][ T5829] Bluetooth: hci1: command tx timeout
[   62.221818][ T6296] netlink: 68 bytes leftover after parsing attributes in process `syz.2.109'.
[   62.299533][ T6303] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.372397][ T6303] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.419485][ T6303] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.480727][ T6303] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.591712][ T6323] netlink: 100 bytes leftover after parsing attributes in process `syz.0.119'.
[   62.603269][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.145713][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'.
[   63.206448][ T6350] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   63.276826][ T6352] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   63.284830][ T6350] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   63.291039][ T6350] bond1 (unregistering): Released all slaves
[   63.369867][ T6365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'.
[   63.372664][ T6367] netlink: 72 bytes leftover after parsing attributes in process `syz.1.130'.
[   63.434380][ T6366] team0 (unregistering): Port device team_slave_0 removed
[   63.439464][ T6366] team0 (unregistering): Port device team_slave_1 removed
[   64.554629][ T5850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.564025][ T5850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.581936][ T5850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.592887][ T5850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.742025][ T6431] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   64.748153][ T6429] IPVS: stopping backup sync thread 6431 ...
[   64.752535][ T6430] netlink: 260 bytes leftover after parsing attributes in process `syz.1.136'.
[   64.758506][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.136'.
[   64.761890][ T6430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.136'.
[   65.189602][ T6473] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.303044][ T6481] bpq0: entered promiscuous mode
[   65.304949][ T6481] bpq0: entered allmulticast mode
[   65.341524][ T6486] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.476187][ T6486] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.571615][ T6486] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.664130][ T6486] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.753841][ T5870] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.764884][ T5870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.770204][ T5870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.777884][ T5870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.957763][ T6520] pim6reg1: entered promiscuous mode
[   65.959572][ T6520] pim6reg1: entered allmulticast mode
[   66.112064][ T6542] netlink: 'syz.2.160': attribute type 3 has an invalid length.
[   66.140133][ T6542] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.217953][ T6540] bond1 (unregistering): Released all slaves
[   66.401326][ T6542] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.508959][ T6542] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.516120][ T6559] IPv6: NLM_F_CREATE should be specified when creating new route
[   66.590848][ T6542] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.233197][ T6579] __nla_validate_parse: 7 callbacks suppressed
[   67.233211][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[   67.240873][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[   67.423299][ T6586] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.498451][ T6586] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.560099][ T6586] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.601908][ T6586] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.663148][ T5850] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.673405][ T5850] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.687370][ T5850] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.697221][ T5850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.069307][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[   68.750437][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.759881][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.767918][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.777622][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.004513][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'.
[   69.088463][ T6644] IPv6: NLM_F_CREATE should be specified when creating new route
[   69.114467][ T6646] netlink: 14 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.228468][ T6646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.233016][ T6646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.237146][ T6646] bond0 (unregistering): Released all slaves
[   69.613763][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'.
[   69.909548][ T6696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.920011][ T6696] netlink: 100 bytes leftover after parsing attributes in process `syz.2.206'.
[   70.034049][ T6712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.209'.
[   70.125576][   T10] IPVS: starting estimator thread 0...
[   70.226256][ T6721] IPVS: using max 79 ests per chain, 189600 per kthread
[   70.350170][   T13] IPVS: stop unused estimator thread 0...
[   71.042279][ T6731] IPv6: NLM_F_CREATE should be specified when creating new route
[   71.060661][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.063514][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.079753][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[   71.494515][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[   71.905324][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.908613][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.963117][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.977538][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.054186][ T6781] tipc: Started in network mode
[   72.058447][ T6781] tipc: Node identity ac1414aa, cluster identity 4711
[   72.062718][ T6781] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.072421][ T5870] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.079485][ T5870] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.083244][ T5870] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.096319][ T5870] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.420333][ T6818] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.450057][ T6820] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.505188][ T6825] __nla_validate_parse: 4 callbacks suppressed
[   72.507090][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.242'.
[   72.510393][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.242'.
[   73.063699][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   73.070856][ T6839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.246'.
[   73.076600][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'.
[   73.196389][   T10] tipc: Node number set to 2886997162
[   73.200468][ T6850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.250'.
[   73.220789][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'.
[   73.642268][ T6892] netlink: 'syz.2.260': attribute type 74 has an invalid length.
[   73.707074][ T6900] Bluetooth: MGMT ver 1.23
[   73.825750][ T6906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.836752][ T6906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.847137][ T6906] bond0 (unregistering): Released all slaves
[   74.108230][ T6928] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.141274][ T6928] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.192143][ T6928] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.249728][ T6928] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.324811][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.339921][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.351945][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.361716][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.080301][ T6956] netlink: 'syz.1.280': attribute type 10 has an invalid length.
[   75.491918][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'.
[   75.701944][ T7011] syz.2.295 uses old SIOCAX25GETINFO
[   75.747530][ T7013] vxcan1: tx address claim with dlc 0
[   75.804032][ T7024] netlink: 'syz.0.299': attribute type 8 has an invalid length.
[   75.822901][ T7025] tipc: Started in network mode
[   75.828798][ T7025] tipc: Node identity ac14142f, cluster identity 4711
[   75.832006][ T7025] tipc: New replicast peer: 0.0.0.0
[   75.836789][ T7025] tipc: Enabled bearer <udp:syz2>, priority 10
[   75.839917][ T7025] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   75.844186][ T7025] netlink: 14 bytes leftover after parsing attributes in process `syz.1.300'.
[   75.858103][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'.
[   75.866890][ T7029] netlink: 'syz.0.302': attribute type 6 has an invalid length.
[   75.918030][ T7030] netlink: 'syz.0.302': attribute type 6 has an invalid length.
[   75.922818][ T7025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.928775][ T7025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.933183][ T7025] bond0 (unregistering): Released all slaves
[   76.169687][   T51] IPVS: starting estimator thread 0...
[   76.169745][ T7037] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   76.257046][ T7048] IPVS: using max 78 ests per chain, 187200 per kthread
[   76.498289][ T7084] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.530619][ T7084] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.583104][ T7084] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.659478][ T7084] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.676166][ T7105] netlink: 'syz.2.316': attribute type 5 has an invalid length.
[   76.736735][ T7106] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[   76.780770][ T5870] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.794041][ T5870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.817298][ T5870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.830832][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.946230][ T6154] tipc: Node number set to 2886997039
[   77.168951][ T7138] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.261096][ T7138] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.319498][ T7138] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.380301][ T7138] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.563710][ T7165] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[   77.588107][ T7165] bond0: entered promiscuous mode
[   77.591758][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.833688][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.850375][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.888516][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.893607][ T7184] warning: `syz.0.338' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.899340][ T7187] __nla_validate_parse: 13 callbacks suppressed
[   77.899350][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'.
[   77.915572][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.919260][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'.
[   77.981029][ T7184] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[   78.015885][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'.
[   78.120919][ T5850] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   78.174670][ T7208] netlink: 104 bytes leftover after parsing attributes in process `syz.1.340'.
[   78.352514][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.356196][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.560730][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.571410][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.630907][ T5850] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.633799][ T5850] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.643965][ T5850] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.658109][ T5850] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.285475][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'.
[   79.360848][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'.
[   79.412607][ T7313] netlink: 268 bytes leftover after parsing attributes in process `syz.0.368'.
[   79.417625][ T7313] unsupported nla_type 65024
[   79.448212][ T7317] netlink: 116 bytes leftover after parsing attributes in process `syz.0.370'.
[   79.453544][ T7318] netlink: 116 bytes leftover after parsing attributes in process `syz.0.370'.
[   79.567731][ T7329] IPv6: NLM_F_CREATE should be specified when creating new route
[   79.692437][ T5850] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   79.902876][ T7363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.768895][ T7377] syzkaller1: entered promiscuous mode
[   80.771106][ T7377] syzkaller1: entered allmulticast mode
[   80.794242][ T7384] batadv_slave_0: entered promiscuous mode
[   80.816900][ T7385] batadv_slave_0: left promiscuous mode
[   80.960696][ T7398] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.047934][ T6154] IPVS: starting estimator thread 0...
[   81.145432][ T7405] IPVS: using max 47 ests per chain, 112800 per kthread
[   81.277692][ T7420] netlink: 'syz.1.397': attribute type 1 has an invalid length.
[   81.281004][ T7420] netlink: 224 bytes leftover after parsing attributes in process `syz.1.397'.
[   81.287051][  T790] cfg80211: failed to load regulatory.db
[   81.321013][ T5870] IPVS: stop unused estimator thread 0...
[   81.334563][ T7423] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.405088][ T7423] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.432119][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.478748][ T7423] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.540228][ T7423] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.610929][ T5870] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.619118][ T5870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.626990][ T5870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.633715][ T5870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.748665][ T7432] netlink: 'syz.1.400': attribute type 39 has an invalid length.
[   82.121348][ T7451] tipc: Can't bind to reserved service type 2
[   82.514428][ T7468] bond0 (unregistering): Released all slaves
[   82.972111][ T7502] __nla_validate_parse: 2 callbacks suppressed
[   82.972120][ T7502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.420'.
[   82.978039][ T7502] netlink: 14 bytes leftover after parsing attributes in process `syz.0.420'.
[   83.091150][ T7510] : entered promiscuous mode
[   83.096953][ T7510] trusted_key: syz.0.424 sent an empty control message without MSG_MORE.
[   83.105484][ T7510] netlink: 'syz.0.424': attribute type 2 has an invalid length.
[   84.360095][ T7545] netlink: 1 bytes leftover after parsing attributes in process `syz.0.434'.
[   84.812824][ T7548] IPv6: NLM_F_CREATE should be specified when creating new route
[   84.857040][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'.
[   85.141761][ T7567] netlink: 96 bytes leftover after parsing attributes in process `syz.2.438'.
[   85.363148][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.453308][ T7586] pim6reg1: entered promiscuous mode
[   85.457183][ T7586] pim6reg1: entered allmulticast mode
[   85.629412][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[   85.633362][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[   85.639668][ T7600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.446'.
[   85.651825][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'.
[   85.654753][ T7602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.447'.
[   85.804839][ T7618] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.839811][ T7618] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.890423][ T7618] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.939248][ T7618] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.995029][ T7629] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.045898][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.052906][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.063602][ T5850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.073319][ T5850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.349360][ T7648] netlink: 'syz.1.458': attribute type 10 has an invalid length.
[   86.750597][ T7678] bpq0: left promiscuous mode
[   86.752784][ T7678] bpq0: left allmulticast mode
[   86.913425][ T7689] netlink: zone id is out of range
[   86.915819][ T7689] netlink: zone id is out of range
[   86.918008][ T7689] netlink: zone id is out of range
[   86.919733][ T7689] netlink: zone id is out of range
[   86.921496][ T7689] netlink: zone id is out of range
[   86.923682][ T7689] netlink: zone id is out of range
[   86.927921][ T7689] netlink: zone id is out of range
[   86.930023][ T7689] netlink: zone id is out of range
[   86.932120][ T7689] netlink: zone id is out of range
[   86.934276][ T7689] netlink: get zone limit has 8 unknown bytes
[   87.140090][ T7702] IPv6: NLM_F_CREATE should be specified when creating new route
[   87.330202][ T7721] netlink: 'syz.1.480': attribute type 8 has an invalid length.
[   87.392965][ T7721] smc: adding net device bond0 with user defined pnetid SYZ2
[   87.609558][ T7744] only policy match revision 0 supported
[   87.609577][ T7744] unable to load match
[   88.118433][ T7819] __nla_validate_parse: 8 callbacks suppressed
[   88.118449][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[   88.860511][ T7831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.936823][ T7840] netlink: 68 bytes leftover after parsing attributes in process `syz.0.514'.
[   88.942363][ T7840] netlink: 277 bytes leftover after parsing attributes in process `syz.0.514'.
[   88.986461][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.512'.
[   89.316460][ T7864] netlink: 830 bytes leftover after parsing attributes in process `syz.2.522'.
[   89.568530][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'.
[   89.598658][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'.
[   89.612171][ T7901] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[   89.817564][ T7917] netlink: 44 bytes leftover after parsing attributes in process `syz.1.540'.
[   89.893220][ T7923] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   89.902201][ T7923] netlink: 388 bytes leftover after parsing attributes in process `syz.1.542'.
[   90.195427][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'.
[   90.201123][ T7941] IPv6: sit1: Disabled Multicast RS
[   90.203427][ T7941] sit1: entered allmulticast mode
[   90.405442][ T7946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.545964][ T7964] lo: entered allmulticast mode
[   90.552439][ T7964] tunl0: entered allmulticast mode
[   90.557733][ T7964] gre0: entered allmulticast mode
[   90.573927][ T7964] gretap0: entered allmulticast mode
[   90.583138][ T7964] erspan0: entered allmulticast mode
[   90.593751][ T7964] ip_vti0: entered allmulticast mode
[   90.598646][ T7964] ip6_vti0: entered allmulticast mode
[   90.602427][ T7964] sit0: entered allmulticast mode
[   90.612418][ T7964] ip6tnl0: entered allmulticast mode
[   90.618713][ T7964] ip6gre0: entered allmulticast mode
[   90.647707][ T7964] ip6gretap0: entered allmulticast mode
[   90.658051][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.660807][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.671578][ T7964] bridge0: entered allmulticast mode
[   90.676522][ T7964] vcan0: entered allmulticast mode
[   90.678832][ T7964] dummy0: entered allmulticast mode
[   90.681489][ T7964] nlmon0: entered allmulticast mode
[   90.684262][ T7964] caif0: entered allmulticast mode
[   90.686794][ T7964] batadv0: entered allmulticast mode
[   90.690573][ T7964] vxcan0: entered allmulticast mode
[   90.692959][ T7964] vxcan1: entered allmulticast mode
[   90.696010][ T7964] veth0: entered allmulticast mode
[   90.710612][ T7964] veth1: entered allmulticast mode
[   90.721651][ T7964] wg0: entered allmulticast mode
[   90.728478][ T7964] wg1: entered allmulticast mode
[   90.740527][ T7964] wg2: entered allmulticast mode
[   90.743513][ T7964] veth0_to_bridge: entered allmulticast mode
[   90.749438][ T7964] veth1_to_bridge: entered allmulticast mode
[   90.760907][ T7964] veth0_to_bond: entered allmulticast mode
[   90.764240][ T7964] bond_slave_0: entered allmulticast mode
[   90.767741][ T7964] veth1_to_bond: entered allmulticast mode
[   90.771051][ T7964] bond_slave_1: entered allmulticast mode
[   90.773347][ T7964] veth0_to_team: entered allmulticast mode
[   90.778574][ T7964] team_slave_0: entered allmulticast mode
[   90.780964][ T7964] veth1_to_team: entered allmulticast mode
[   90.785922][ T7964] team_slave_1: entered allmulticast mode
[   90.789438][ T7964] veth0_to_batadv: entered allmulticast mode
[   90.793437][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.800081][ T7964] batadv_slave_0: entered allmulticast mode
[   90.808149][ T7964] veth1_to_batadv: entered allmulticast mode
[   90.815142][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.819342][ T7964] batadv_slave_1: entered allmulticast mode
[   90.823179][ T7964] xfrm0: entered allmulticast mode
[   90.826590][ T7964] veth0_to_hsr: entered allmulticast mode
[   90.829978][ T7964] hsr_slave_0: entered allmulticast mode
[   90.834715][ T7964] veth1_to_hsr: entered allmulticast mode
[   90.841244][ T7964] hsr_slave_1: entered allmulticast mode
[   90.844982][ T7964] hsr0: entered allmulticast mode
[   90.854630][ T7964] veth1_virt_wifi: entered allmulticast mode
[   90.859619][ T7964] veth0_virt_wifi: entered allmulticast mode
[   90.864265][ T7964] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   90.867894][ T7964] veth1_vlan: entered allmulticast mode
[   90.872704][ T7964] veth0_vlan: entered allmulticast mode
[   90.881458][ T7964] vlan0: entered allmulticast mode
[   90.883367][ T7964] vlan1: entered allmulticast mode
[   90.886897][ T7964] macvlan0: entered allmulticast mode
[   90.891060][ T7964] macvlan1: entered allmulticast mode
[   90.894261][ T7964] ipvlan0: entered allmulticast mode
[   90.897126][ T7964] ipvlan1: entered allmulticast mode
[   90.900228][ T7964] veth1_macvtap: entered allmulticast mode
[   90.903976][ T7964] veth0_macvtap: entered allmulticast mode
[   90.908232][ T7964] macvtap0: entered allmulticast mode
[   90.912391][ T7964] macsec0: entered allmulticast mode
[   90.917818][ T7964] geneve0: entered allmulticast mode
[   90.923569][ T7964] geneve1: entered allmulticast mode
[   90.937856][ T7964] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   90.948214][ T7964] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   90.953203][ T7964] ip6gretap1: entered allmulticast mode
[   90.956052][ T7964] syztnl0: entered allmulticast mode
[   90.958897][ T7964] bridge1: entered allmulticast mode
[   90.961364][ T7964] netdevsim netdevsim1 eth0: entered allmulticast mode
[   90.964401][ T7964] netdevsim netdevsim1 eth1: entered allmulticast mode
[   90.970155][ T7964] netdevsim netdevsim1 eth2: entered allmulticast mode
[   90.973193][ T7964] netdevsim netdevsim1 eth3: entered allmulticast mode
[   90.976460][ T7964] bond0: entered allmulticast mode
[   90.981283][ T5850] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.987732][ T5850] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.991260][ T5850] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.994718][ T5850] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.648967][ T8078] netlink: 'syz.2.585': attribute type 7 has an invalid length.
[   91.651745][ T8078] netlink: 'syz.2.585': attribute type 8 has an invalid length.
[   92.110548][ T8103] pim6reg1: entered promiscuous mode
[   92.112406][ T8103] pim6reg1: entered allmulticast mode
[   92.250526][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.254782][ T8105] team0: Port device bond0 added
[   93.195546][ T8173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.198586][ T8173] IPv6: NLM_F_CREATE should be set when creating new route
[   93.247165][ T8175] __nla_validate_parse: 12 callbacks suppressed
[   93.247182][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'.
[   93.253555][ T8175] openvswitch: netlink: Missing key (keys=40, expected=100)
[   93.314766][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[   93.372207][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'.
[   93.901667][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[   94.070475][ T8212] pim6reg1: entered promiscuous mode
[   94.072437][ T8212] pim6reg1: entered allmulticast mode
[   94.187906][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.622'.
[   94.208735][ T8212] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.213499][ T8212] team0: Port device bond1 added
[   94.310105][ T8217] netlink: 108 bytes leftover after parsing attributes in process `syz.2.623'.
[   94.316919][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'.
[   94.703218][ T8237] openvswitch: netlink: IPv4 tun info is not correct
[   94.747487][   T33] audit: type=1107 audit(1754304807.147:3): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[   94.842949][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'.
[   94.891525][ T8251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.894074][ T8251] IPv6: NLM_F_CREATE should be set when creating new route
[   94.899032][ T8247] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[   94.927405][ T8254] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[   94.934962][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'.
[   94.939279][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'.
[   94.954116][ T8247] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.016001][ T8247] bond1 (unregistering): Released all slaves
[   95.306338][ T8279] netlink: 'syz.1.642': attribute type 3 has an invalid length.
[   95.597156][ T8299] bridge: RTM_NEWNEIGH with invalid ether address
[   96.024822][ T8308] netlink: 'syz.0.648': attribute type 8 has an invalid length.
[   96.050133][ T8308] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.054621][ T8308] bond0: (slave bond2): Enslaving as a backup interface with a down link
[   96.095997][ T8311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.274665][ T8326] tipc: Started in network mode
[   96.278913][ T8326] tipc: Node identity e6728edd0c6e, cluster identity 4711
[   96.282172][ T8326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.286576][ T8325] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.295826][ T8326] syzkaller0: entered promiscuous mode
[   96.298089][ T8326] syzkaller0: entered allmulticast mode
[   96.308568][ T8325] tipc: Resetting bearer <eth:syzkaller0>
[   96.415461][ T8329] tipc: Resetting bearer <eth:syzkaller0>
[   96.442522][ T8329] tipc: Disabling bearer <eth:syzkaller0>
[   96.457491][ T8331] netlink: 'syz.1.656': attribute type 4 has an invalid length.
[   96.570140][ T8353] netlink: 'syz.0.659': attribute type 4 has an invalid length.
[   96.638480][ T8361] netlink: 'syz.2.662': attribute type 1 has an invalid length.
[   96.653979][ T8361] bond2 (unregistering): Released all slaves
[   96.821809][ T8373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   97.229629][ T8389] netlink: 'syz.2.670': attribute type 1 has an invalid length.
[   97.233405][ T8389] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   97.846671][ T8442] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   97.874340][ T8442] netlink: 'syz.1.684': attribute type 4 has an invalid length.
[   97.884100][ T8442] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   97.920550][ T8449] ieee802154 phy0 wpan0: encryption failed: -22
[   97.923847][ T8449] netlink: 'syz.2.687': attribute type 1 has an invalid length.
[   97.930680][ T8442] batadv_slave_0: entered promiscuous mode
[   97.932655][ T8442] batadv_slave_0: left allmulticast mode
[   98.052105][ T8455] ieee802154 phy0 wpan0: encryption failed: -22
[   98.272536][ T8474] __nla_validate_parse: 12 callbacks suppressed
[   98.272547][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[   98.413312][ T8481] netlink: 100 bytes leftover after parsing attributes in process `syz.2.694'.
[   98.422667][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'.
[   98.883613][ T8517] netlink: 'syz.0.704': attribute type 2 has an invalid length.
[   98.891126][ T8517] netlink: 'syz.0.704': attribute type 1 has an invalid length.
[   99.164389][ T8539] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[   99.410461][ T8547] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.714'.
[   99.489285][ T8553] netlink: 88 bytes leftover after parsing attributes in process `syz.2.716'.
[   99.560099][ T8554] netlink: 88 bytes leftover after parsing attributes in process `syz.2.716'.
[   99.739196][ T8566] netlink: 'syz.0.720': attribute type 4 has an invalid length.
[   99.845120][ T8572] netlink: 68 bytes leftover after parsing attributes in process `syz.0.722'.
[   99.987405][ T8588] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   99.991406][ T8584] IPVS: stopping backup sync thread 8588 ...
[   99.998983][ T8584] netlink: 260 bytes leftover after parsing attributes in process `syz.2.724'.
[  100.007516][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'.
[  100.011432][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.724'.
[  100.467499][ T8648] sctp: [Deprecated]: syz.0.742 (pid 8648) Use of int in max_burst socket option.
[  100.467499][ T8648] Use struct sctp_assoc_value instead
[  100.504270][ T8650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002
[  101.038741][ T8716] bond3: entered promiscuous mode
[  101.040895][ T8716] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.139011][ T8720] netlink: zone id is out of range
[  101.143140][ T8720] netlink: zone id is out of range
[  101.149150][ T8720] netlink: zone id is out of range
[  101.151444][ T8720] netlink: zone id is out of range
[  101.154275][ T8720] netlink: zone id is out of range
[  101.156663][ T8720] netlink: zone id is out of range
[  101.159984][ T8720] netlink: zone id is out of range
[  101.164012][ T8720] netlink: zone id is out of range
[  101.169889][ T8720] netlink: zone id is out of range
[  101.172140][ T8720] netlink: zone id is out of range
[  101.275166][ T8747] vxlan0: entered promiscuous mode
[  101.277102][ T8747] vxlan0: entered allmulticast mode
[  101.279100][ T5870] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.281857][ T5870] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.286243][ T5870] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.296393][ T5870] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.440899][ T8765] smc: removing net device bond0 with user defined pnetid SYZ2
[  101.444281][ T8765] bond0 (unregistering): Released all slaves
[  102.341494][   T33] audit: type=1800 audit(1754304814.737:4): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.800" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1224 res=0 errno=0
[  103.278620][ T8921] __nla_validate_parse: 17 callbacks suppressed
[  103.278638][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'.
[  103.321383][ T8923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'.
[  103.333304][ T8923] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  103.599399][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  103.602550][ T8926] netlink: 312 bytes leftover after parsing attributes in process `syz.1.821'.
[  103.606228][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  103.833889][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'.
[  103.837789][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'.
[  103.842642][ T8937] netlink: 'syz.1.823': attribute type 20 has an invalid length.
[  104.412658][ T8971] bond0: option use_carrier: invalid value (2)
[  104.544414][ T8981] netlink: 68 bytes leftover after parsing attributes in process `syz.0.835'.
[  104.552354][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'.
[  104.686822][ T9000] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.758669][ T9000] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.822188][ T9000] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.869941][ T9000] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.917840][ T9012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.842'.
[  104.974353][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.986710][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.027374][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.055343][ T5850] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.593757][ T9147] veth0_to_team: entered promiscuous mode
[  106.596551][ T9147] veth0_to_team: entered allmulticast mode
[  107.625762][ T9252] net_ratelimit: 3 callbacks suppressed
[  107.625775][ T9252] netlink: zone id is out of range
[  107.630391][ T9251] netlink: zone id is out of range
[  107.641282][ T9252] netlink: zone id is out of range
[  107.644072][ T9251] netlink: zone id is out of range
[  107.688887][ T9252] netlink: zone id is out of range
[  107.691521][ T9251] netlink: zone id is out of range
[  107.693677][ T9252] netlink: zone id is out of range
[  107.694629][ T9251] netlink: zone id is out of range
[  107.698717][ T9251] netlink: zone id is out of range
[  107.700408][ T9251] netlink: zone id is out of range
[  108.104748][ T9307] netlink: 'syz.0.897': attribute type 12 has an invalid length.
[  108.113586][ T9306] netlink: 'syz.2.896': attribute type 1 has an invalid length.
[  108.125714][ T9307] netlink: 'syz.0.897': attribute type 12 has an invalid length.
[  108.662082][ T9379] netlink: 'syz.1.915': attribute type 1 has an invalid length.
[  108.677722][ T9379] smc: adding net device bond0 with user defined pnetid SYZ2
[  109.193084][ T9443] __nla_validate_parse: 5 callbacks suppressed
[  109.193097][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'.
[  109.257112][ T9452] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  109.260625][ T9452] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  109.314740][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'.
[  109.339090][ T9458] netlink: 'syz.2.936': attribute type 8 has an invalid length.
[  109.345542][ T9454] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[  109.349676][ T9454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.934'.
[  109.964288][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.946'.
[  110.004147][ T9489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.943'.
[  110.034953][ T9493] netlink: 'syz.2.947': attribute type 29 has an invalid length.
[  110.038773][ T9494] netlink: 'syz.2.947': attribute type 29 has an invalid length.
[  110.042587][ T9493] netlink: 488 bytes leftover after parsing attributes in process `syz.2.947'.
[  110.051592][ T9496] bond0 (unregistering): (slave bond2): Releasing backup interface
[  110.067674][ T9496] bond0 (unregistering): Released all slaves
[  110.089156][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'.
[  110.290380][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.957'.
[  110.430988][ T9544] netlink: 14 bytes leftover after parsing attributes in process `syz.2.958'.
[  110.531745][ T9547] pim6reg1: entered promiscuous mode
[  110.534134][ T9547] pim6reg1: entered allmulticast mode
[  110.556788][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  110.678667][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.682652][ T9547] team0: Port device bond0 added
[  110.876998][ T9574] netlink: 'syz.1.965': attribute type 1 has an invalid length.
[  110.894211][ T9574] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.945471][ T9574] bond1 (unregistering): Released all slaves
[  111.633116][ T9601] netlink: 'syz.2.974': attribute type 1 has an invalid length.
[  112.029573][ T9626] smc: net device bond0 applied user defined pnetid SYZ2
[  112.297066][ T9656] netlink: 'syz.2.990': attribute type 29 has an invalid length.
[  112.312048][ T9656] netlink: 'syz.2.990': attribute type 29 has an invalid length.
[  112.395082][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.395082][ T9659] Use struct sctp_sack_info instead
[  112.415937][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.415937][ T9659] Use struct sctp_sack_info instead
[  112.424051][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.424051][ T9659] Use struct sctp_sack_info instead
[  112.433637][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.433637][ T9659] Use struct sctp_sack_info instead
[  112.439605][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.439605][ T9659] Use struct sctp_sack_info instead
[  112.446409][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.446409][ T9659] Use struct sctp_sack_info instead
[  112.451708][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.451708][ T9659] Use struct sctp_sack_info instead
[  112.457367][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.457367][ T9659] Use struct sctp_sack_info instead
[  112.464203][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.464203][ T9659] Use struct sctp_sack_info instead
[  112.495870][ T9659] sctp: [Deprecated]: syz.0.991 (pid 9659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.495870][ T9659] Use struct sctp_sack_info instead
[  113.216500][ T9711] syzkaller1: entered promiscuous mode
[  113.218271][ T9711] syzkaller1: entered allmulticast mode
[  113.287934][ T9718] sctp: [Deprecated]: syz.1.1005 (pid 9718) Use of int in max_burst socket option.
[  113.287934][ T9718] Use struct sctp_assoc_value instead
[  113.297072][ T9718] netlink: 'syz.1.1005': attribute type 1 has an invalid length.
[  113.530877][ T9730] IPv6: sit1: Disabled Multicast RS
[  113.533300][ T9730] sit1: entered allmulticast mode
[  113.993702][ T9773] netlink: 'syz.0.1021': attribute type 3 has an invalid length.
[  114.212043][ T9785] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  114.564544][ T9810] __nla_validate_parse: 8 callbacks suppressed
[  114.564558][ T9810] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1032'.
[  114.627016][ T9814] smc: removing net device bond0 with user defined pnetid SYZ2
[  114.630554][ T9814] bond0 (unregistering): Released all slaves
[  114.889028][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'.
[  115.483193][ T9835] netlink: 'syz.1.1040': attribute type 15 has an invalid length.
[  116.095027][ T9861] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  116.105040][ T9872] smc: net device bond0 applied user defined pnetid SYZ2
[  116.109729][ T9873] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1053'.
[  116.109748][ T9872] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1053'.
[  116.241854][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'.
[  116.573176][ T9898] netlink: 'syz.1.1061': attribute type 9 has an invalid length.
[  116.585589][ T9898] netlink: 'syz.1.1061': attribute type 7 has an invalid length.
[  116.589132][ T9898] netlink: 'syz.1.1061': attribute type 8 has an invalid length.
[  116.640535][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'.
[  116.674192][ T9901] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1062'.
[  116.959888][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1068'.
[  117.983618][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'.
[  118.167463][ T5829] Bluetooth: hci0: command tx timeout
[  118.219125][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'.
[  118.261899][ T9993] Illegal XDP return value 4294967289 on prog  (id 216) dev N/A, expect packet loss!
[  119.490499][T10092] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.547995][T10092] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.583534][T10104] __nla_validate_parse: 8 callbacks suppressed
[  119.583545][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  119.593724][T10104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1130'.
[  119.610392][T10092] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.619808][T10106] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'.
[  119.640927][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1131'.
[  119.669502][T10092] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.750176][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.760423][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.780657][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.792265][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.889279][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'.
[  119.892546][T10133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1138'.
[  119.896645][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'.
[  119.900614][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1139'.
[  119.905172][T10133] bond4: entered promiscuous mode
[  119.916499][T10133] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.044047][T10148] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1143'.
[  120.162449][T10162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1144'.
[  120.543815][T10183] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.590846][T10183] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.631910][T10183] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.683623][T10183] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.903146][ T5850] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.920000][ T5850] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.945040][ T5850] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.962113][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.085736][T10205] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  121.113354][T10205] smc: adding net device bond0 with user defined pnetid SYZ2
[  121.119367][T10205] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.137949][T10205] bond0: (slave geneve2): making interface the new active one
[  121.142985][T10205] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  121.150980][ T5850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.159627][T10205] bond0: entered promiscuous mode
[  121.161854][T10205] geneve2: entered promiscuous mode
[  121.167039][ T5850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.177730][ T5850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.181340][ T5850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.657956][T10231] smc: removing net device bond0 with user defined pnetid SYZ2
[  121.663519][T10231] bond0 (unregistering): (slave geneve2): Releasing active interface
[  121.670666][T10231] geneve2: left promiscuous mode
[  121.682217][T10231] bond0 (unregistering): Released all slaves
[  121.704519][ T5850] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.711441][ T5850] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.723197][ T5850] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.726335][ T5850] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.824085][T10249] netlink: 'syz.0.1171': attribute type 1 has an invalid length.
[  121.826797][T10249] netlink: 'syz.0.1171': attribute type 1 has an invalid length.
[  122.044698][T10265] vxlan0: entered promiscuous mode
[  122.047306][T10265] vxlan0: entered allmulticast mode
[  122.049852][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.053322][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.059374][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.062807][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.430990][T10293] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.504849][T10293] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.562489][T10301] GUP no longer grows the stack in syz.1.1187 (10301): 200000004000-200000008000 (200000002000)
[  122.566398][T10301] CPU: 1 UID: 0 PID: 10301 Comm: syz.1.1187 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  122.566410][T10301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.566415][T10301] Call Trace:
[  122.566419][T10301]  <TASK>
[  122.566422][T10301]  dump_stack_lvl+0x189/0x250
[  122.566436][T10301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.566444][T10301]  ? __pfx__printk+0x10/0x10
[  122.566452][T10301]  ? find_vma+0xe7/0x160
[  122.566465][T10301]  ? vma_is_secretmem+0xd/0x50
[  122.566476][T10301]  __get_user_pages+0x2a60/0x30b0
[  122.566485][T10301]  ? stack_depot_save_flags+0x40/0x900
[  122.566498][T10301]  ? __kvmalloc_node_noprof+0x30d/0x5f0
[  122.566519][T10301]  ? __pfx___get_user_pages+0x10/0x10
[  122.566532][T10301]  __gup_longterm_locked+0x3e3/0x15b0
[  122.566545][T10301]  ? xdp_umem_pin_pages+0xc6/0x340
[  122.566558][T10301]  ? rcu_is_watching+0x15/0xb0
[  122.566570][T10301]  ? xdp_umem_pin_pages+0x52/0x340
[  122.566580][T10301]  pin_user_pages+0x9e/0xd0
[  122.566591][T10301]  xdp_umem_pin_pages+0x117/0x340
[  122.566604][T10301]  xdp_umem_create+0x677/0x8e0
[  122.566619][T10301]  xsk_setsockopt+0x7b0/0x8d0
[  122.566630][T10301]  ? __pfx_xsk_setsockopt+0x10/0x10
[  122.566642][T10301]  ? __fget_files+0x2a/0x420
[  122.566650][T10301]  ? aa_sock_opt_perm+0x74/0x110
[  122.566661][T10301]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  122.566672][T10301]  ? __pfx_xsk_setsockopt+0x10/0x10
[  122.566686][T10301]  do_sock_setsockopt+0x17c/0x1b0
[  122.566702][T10301]  __x64_sys_setsockopt+0x13f/0x1b0
[  122.566717][T10301]  do_syscall_64+0xfa/0x3b0
[  122.566736][T10301]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.566752][T10301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.566764][T10301]  ? exc_page_fault+0x9f/0xf0
[  122.566783][T10301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.566793][T10301] RIP: 0033:0x7f760418eb69
[  122.566801][T10301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.566808][T10301] RSP: 002b:00007f7604f55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  122.566817][T10301] RAX: ffffffffffffffda RBX: 00007f76043b5fa0 RCX: 00007f760418eb69
[  122.566822][T10301] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000009
[  122.566826][T10301] RBP: 00007f7604211df1 R08: 0000000000000020 R09: 0000000000000000
[  122.566830][T10301] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  122.566835][T10301] R13: 0000000000000000 R14: 00007f76043b5fa0 R15: 00007ffd5e7d8978
[  122.566846][T10301]  </TASK>
[  122.669606][T10293] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.731387][T10293] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.851582][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.865350][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.880019][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.893836][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.251132][T10333] netlink: 'syz.1.1193': attribute type 9 has an invalid length.
[  123.253850][T10333] netlink: 'syz.1.1193': attribute type 7 has an invalid length.
[  123.256593][T10333] netlink: 'syz.1.1193': attribute type 8 has an invalid length.
[  123.294292][T10338] netlink: 'syz.1.1194': attribute type 1 has an invalid length.
[  123.349422][T10338] smc: adding net device bond0 with user defined pnetid SYZ2
[  123.355526][T10338] smc: removing net device bond0 with user defined pnetid SYZ2
[  123.360132][T10338] bond0 (unregistering): Released all slaves
[  124.029536][T10354] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.084486][T10354] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.110973][T10360] netlink: 'syz.0.1202': attribute type 11 has an invalid length.
[  124.183662][T10354] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.239592][T10354] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.279457][ T5850] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.289433][ T5850] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.298899][ T5850] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.308762][ T5832] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.831957][T10412] __nla_validate_parse: 9 callbacks suppressed
[  124.831971][T10412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1217'.
[  124.919709][T10415] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  124.926585][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'.
[  124.957651][T10415] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1218'.
[  125.114517][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'.
[  125.160607][T10430] syzkaller1: entered promiscuous mode
[  125.162584][T10430] syzkaller1: entered allmulticast mode
[  125.278122][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'.
[  125.291150][T10444] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000
[  125.418577][T10460] macvtap1: entered allmulticast mode
[  125.420494][T10460] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  125.428419][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'.
[  125.505494][T10460] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  125.597448][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'.
[  125.673029][T10487] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1239'.
[  125.713917][T10491] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1241'.
[  125.719749][T10491] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1241'.
[  125.726720][T10494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  126.609472][T10527] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  126.793412][T10541] vxlan0: entered promiscuous mode
[  126.795824][T10541] vxlan0: entered allmulticast mode
[  126.798439][ T5832] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.801090][ T5832] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.803622][ T5832] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.809409][ T5832] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.824641][T10543] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  126.949615][T10562] net_ratelimit: 198 callbacks suppressed
[  126.949625][T10562] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  127.098651][T10568] ==================================================================
[  127.101342][T10568] BUG: KASAN: slab-out-of-bounds in xfrm_alloc_spi+0x570/0xf30
[  127.103892][T10568] Read of size 4 at addr ffff888112f9fb44 by task syz.0.1265/10568
[  127.107575][T10568] 
[  127.108386][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.0.1265 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  127.108397][T10568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.108402][T10568] Call Trace:
[  127.108406][T10568]  <TASK>
[  127.108410][T10568]  dump_stack_lvl+0x189/0x250
[  127.108420][T10568]  ? __kasan_check_byte+0x12/0x40
[  127.108432][T10568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.108440][T10568]  ? lock_release+0x4b/0x3e0
[  127.108452][T10568]  ? __virt_addr_valid+0x4a5/0x5c0
[  127.108462][T10568]  print_report+0xca/0x240
[  127.108473][T10568]  ? xfrm_alloc_spi+0x570/0xf30
[  127.108481][T10568]  kasan_report+0x118/0x150
[  127.108493][T10568]  ? xfrm_alloc_spi+0x570/0xf30
[  127.108501][T10568]  xfrm_alloc_spi+0x570/0xf30
[  127.108509][T10568]  ? xfrm_alloc_spi+0x2a0/0xf30
[  127.108518][T10568]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  127.108525][T10568]  ? xfrm_find_acq+0x87/0xa0
[  127.108534][T10568]  xfrm_alloc_userspi+0x70b/0xc90
[  127.108542][T10568]  ? __pfx_aa_get_newest_label+0x10/0x10
[  127.108554][T10568]  ? apparmor_capable+0x137/0x1b0
[  127.108561][T10568]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  127.108570][T10568]  ? __nla_parse+0x40/0x60
[  127.108579][T10568]  xfrm_user_rcv_msg+0x7a3/0xab0
[  127.108588][T10568]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  127.108601][T10568]  ? __pfx___mutex_trylock_common+0x10/0x10
[  127.108609][T10568]  ? rcu_is_watching+0x15/0xb0
[  127.108619][T10568]  ? trace_contention_end+0x39/0x120
[  127.108626][T10568]  ? __mutex_lock+0x335/0x1340
[  127.108637][T10568]  netlink_rcv_skb+0x208/0x470
[  127.108648][T10568]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  127.108656][T10568]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.108667][T10568]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.108677][T10568]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.108687][T10568]  xfrm_netlink_rcv+0x79/0x90
[  127.108695][T10568]  netlink_unicast+0x82f/0x9e0
[  127.108706][T10568]  ? __pfx_netlink_unicast+0x10/0x10
[  127.108715][T10568]  ? netlink_sendmsg+0x642/0xb30
[  127.108726][T10568]  ? skb_put+0x11b/0x210
[  127.108733][T10568]  netlink_sendmsg+0x805/0xb30
[  127.108744][T10568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.108755][T10568]  ? aa_sock_msg_perm+0x94/0x160
[  127.108764][T10568]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.108772][T10568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.108782][T10568]  __sock_sendmsg+0x21c/0x270
[  127.108792][T10568]  ____sys_sendmsg+0x505/0x830
[  127.108800][T10568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.108808][T10568]  ? import_iovec+0x74/0xa0
[  127.108818][T10568]  ___sys_sendmsg+0x21f/0x2a0
[  127.108826][T10568]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.108838][T10568]  ? __fget_files+0x2a/0x420
[  127.108845][T10568]  ? __fget_files+0x3a0/0x420
[  127.108852][T10568]  __x64_sys_sendmsg+0x19b/0x260
[  127.108860][T10568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.108868][T10568]  ? rcu_is_watching+0x15/0xb0
[  127.108879][T10568]  ? do_syscall_64+0xbe/0x3b0
[  127.108890][T10568]  do_syscall_64+0xfa/0x3b0
[  127.108900][T10568]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.108909][T10568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.108916][T10568]  ? exc_page_fault+0x9f/0xf0
[  127.108925][T10568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.108932][T10568] RIP: 0033:0x7f0a8e18eb69
[  127.108939][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.108946][T10568] RSP: 002b:00007f0a8bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.108961][T10568] RAX: ffffffffffffffda RBX: 00007f0a8e3b5fa0 RCX: 00007f0a8e18eb69
[  127.108967][T10568] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  127.108972][T10568] RBP: 00007f0a8e211df1 R08: 0000000000000000 R09: 0000000000000000
[  127.108977][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.108982][T10568] R13: 0000000000000000 R14: 00007f0a8e3b5fa0 R15: 00007ffe75c52388
[  127.108989][T10568]  </TASK>
[  127.108992][T10568] 
[  127.240738][T10568] Allocated by task 5820:
[  127.242129][T10568]  kasan_save_track+0x3e/0x80
[  127.243653][T10568]  __kasan_slab_alloc+0x6c/0x80
[  127.245255][T10568]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  127.247125][T10568]  kmalloc_reserve+0xbd/0x290
[  127.248672][T10568]  __alloc_skb+0x142/0x2d0
[  127.250104][T10568]  napi_alloc_skb+0x84/0x7d0
[  127.251631][T10568]  e1000_clean_rx_irq+0x448/0x1170
[  127.253277][T10568]  e1000_clean+0xca4/0x2b00
[  127.254715][T10568]  __napi_poll+0xc7/0x360
[  127.256244][T10568]  net_rx_action+0x707/0xe30
[  127.257748][T10568]  handle_softirqs+0x286/0x870
[  127.259290][T10568]  __irq_exit_rcu+0xca/0x1f0
[  127.260799][T10568]  irq_exit_rcu+0x9/0x30
[  127.262158][T10568]  common_interrupt+0xbb/0xe0
[  127.263668][T10568]  asm_common_interrupt+0x26/0x40
[  127.265297][T10568] 
[  127.266168][T10568] Freed by task 5820:
[  127.267457][T10568]  kasan_save_track+0x3e/0x80
[  127.269233][T10568]  kasan_save_free_info+0x46/0x50
[  127.271126][T10568]  __kasan_slab_free+0x62/0x70
[  127.272691][T10568]  kmem_cache_free+0x18f/0x400
[  127.274253][T10568]  skb_release_data+0x62d/0x7c0
[  127.275952][T10568]  __kfree_skb+0x55/0x70
[  127.277570][T10568]  tcp_rcv_established+0xe9e/0x1eb0
[  127.279469][T10568]  tcp_v4_do_rcv+0xa23/0xce0
[  127.281308][T10568]  tcp_v4_rcv+0x26a6/0x2f40
[  127.282811][T10568]  ip_protocol_deliver_rcu+0x221/0x440
[  127.284664][T10568]  ip_local_deliver_finish+0x3bb/0x6f0
[  127.286542][T10568]  NF_HOOK+0x30c/0x3a0
[  127.287882][T10568]  ip_sublist_rcv_finish+0x221/0x2a0
[  127.289598][T10568]  ip_sublist_rcv+0x6e7/0x9b0
[  127.291157][T10568]  ip_list_rcv+0x3e2/0x430
[  127.292621][T10568]  __netif_receive_skb_list_core+0x7d2/0x800
[  127.294608][T10568]  netif_receive_skb_list_internal+0x975/0xcc0
[  127.296979][T10568]  gro_receive_skb+0x642/0xce0
[  127.298582][T10568]  e1000_clean_rx_irq+0x980/0x1170
[  127.300238][T10568]  e1000_clean+0xca4/0x2b00
[  127.301730][T10568]  __napi_poll+0xc7/0x360
[  127.303120][T10568]  net_rx_action+0x707/0xe30
[  127.304630][T10568]  handle_softirqs+0x286/0x870
[  127.306298][T10568]  __irq_exit_rcu+0xca/0x1f0
[  127.307836][T10568]  irq_exit_rcu+0x9/0x30
[  127.309262][T10568]  common_interrupt+0xbb/0xe0
[  127.310792][T10568]  asm_common_interrupt+0x26/0x40
[  127.312409][T10568] 
[  127.313181][T10568] The buggy address belongs to the object at ffff888112f9f800
[  127.313181][T10568]  which belongs to the cache skbuff_small_head of size 704
[  127.318181][T10568] The buggy address is located 132 bytes to the right of
[  127.318181][T10568]  allocated 704-byte region [ffff888112f9f800, ffff888112f9fac0)
[  127.322848][T10568] 
[  127.323644][T10568] The buggy address belongs to the physical page:
[  127.325760][T10568] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112f9c
[  127.328511][T10568] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  127.331287][T10568] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  127.333738][T10568] page_type: f5(slab)
[  127.335026][T10568] raw: 057ff00000000040 ffff88801d2a0c80 ffffea0004402100 dead000000000002
[  127.338050][T10568] raw: 0000000000000000 0000000000120012 00000000f5000000 0000000000000000
[  127.340809][T10568] head: 057ff00000000040 ffff88801d2a0c80 ffffea0004402100 dead000000000002
[  127.343635][T10568] head: 0000000000000000 0000000000120012 00000000f5000000 0000000000000000
[  127.346509][T10568] head: 057ff00000000002 ffffea00044be701 00000000ffffffff 00000000ffffffff
[  127.349241][T10568] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  127.351940][T10568] page dumped because: kasan: bad access detected
[  127.354026][T10568] page_owner tracks the page as allocated
[  127.356116][T10568] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9603, tgid 9603 (modprobe), ts 111625271365, free_ts 111568701567
[  127.362832][T10568]  post_alloc_hook+0x240/0x2a0
[  127.364452][T10568]  get_page_from_freelist+0x21e4/0x22c0
[  127.366332][T10568]  __alloc_frozen_pages_noprof+0x181/0x370
[  127.368184][T10568]  alloc_pages_mpol+0x232/0x4a0
[  127.369760][T10568]  allocate_slab+0x8a/0x3b0
[  127.371237][T10568]  ___slab_alloc+0xbfc/0x1480
[  127.372782][T10568]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  127.374694][T10568]  kmalloc_reserve+0xbd/0x290
[  127.376568][T10568]  __alloc_skb+0x142/0x2d0
[  127.378067][T10568]  __tcp_send_ack+0xaf/0x620
[  127.379567][T10568]  tcp_delack_timer_handler+0x366/0x530
[  127.381310][T10568]  tcp_delack_timer+0x205/0x3b0
[  127.382855][T10568]  call_timer_fn+0x17e/0x5f0
[  127.384338][T10568]  __run_timer_base+0x61a/0x860
[  127.386084][T10568]  run_timer_softirq+0xb7/0x180
[  127.387683][T10568]  handle_softirqs+0x286/0x870
[  127.389261][T10568] page last free pid 5748 tgid 5748 stack trace:
[  127.391329][T10568]  __free_frozen_pages+0xc71/0xe70
[  127.393056][T10568]  __slab_free+0x326/0x400
[  127.394554][T10568]  qlist_free_all+0x97/0x140
[  127.396373][T10568]  kasan_quarantine_reduce+0x148/0x160
[  127.398326][T10568]  __kasan_slab_alloc+0x22/0x80
[  127.399931][T10568]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  127.401939][T10568]  __alloc_skb+0x112/0x2d0
[  127.403512][T10568]  tcp_stream_alloc_skb+0x3d/0x340
[  127.405669][T10568]  tcp_sendmsg_locked+0xf38/0x5620
[  127.407861][T10568]  tcp_sendmsg+0x2f/0x50
[  127.409698][T10568]  __sock_sendmsg+0x19c/0x270
[  127.411719][T10568]  sock_write_iter+0x258/0x330
[  127.413759][T10568]  vfs_write+0x54b/0xa90
[  127.415521][T10568]  ksys_write+0x145/0x250
[  127.417276][T10568]  do_syscall_64+0xfa/0x3b0
[  127.418755][T10568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.420711][T10568] 
[  127.421522][T10568] Memory state around the buggy address:
[  127.423411][T10568]  ffff888112f9fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.426101][T10568]  ffff888112f9fa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  127.428709][T10568] >ffff888112f9fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  127.431312][T10568]                                            ^
[  127.433371][T10568]  ffff888112f9fb80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.436151][T10568]  ffff888112f9fc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.438905][T10568] ==================================================================
[  127.441844][T10568] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  127.444222][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.0.1265 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  127.448262][T10568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.451567][T10568] Call Trace:
[  127.452690][T10568]  <TASK>
[  127.453729][T10568]  dump_stack_lvl+0x99/0x250
[  127.455341][T10568]  ? __asan_memcpy+0x40/0x70
[  127.457173][T10568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.458856][T10568]  ? __pfx__printk+0x10/0x10
[  127.460411][T10568]  panic+0x2db/0x790
[  127.461719][T10568]  ? __pfx_panic+0x10/0x10
[  127.463216][T10568]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  127.465221][T10568]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  127.467239][T10568]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.469322][T10568]  ? print_memory_metadata+0x314/0x400
[  127.471121][T10568]  ? xfrm_alloc_spi+0x570/0xf30
[  127.472746][T10568]  check_panic_on_warn+0x89/0xb0
[  127.474443][T10568]  ? xfrm_alloc_spi+0x570/0xf30
[  127.476309][T10568]  end_report+0x78/0x160
[  127.478095][T10568]  kasan_report+0x129/0x150
[  127.479616][T10568]  ? xfrm_alloc_spi+0x570/0xf30
[  127.481176][T10568]  xfrm_alloc_spi+0x570/0xf30
[  127.482745][T10568]  ? xfrm_alloc_spi+0x2a0/0xf30
[  127.484381][T10568]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  127.486136][T10568]  ? xfrm_find_acq+0x87/0xa0
[  127.487660][T10568]  xfrm_alloc_userspi+0x70b/0xc90
[  127.489329][T10568]  ? __pfx_aa_get_newest_label+0x10/0x10
[  127.491170][T10568]  ? apparmor_capable+0x137/0x1b0
[  127.492824][T10568]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  127.494594][T10568]  ? __nla_parse+0x40/0x60
[  127.496276][T10568]  xfrm_user_rcv_msg+0x7a3/0xab0
[  127.498058][T10568]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  127.499818][T10568]  ? __pfx___mutex_trylock_common+0x10/0x10
[  127.501772][T10568]  ? rcu_is_watching+0x15/0xb0
[  127.503326][T10568]  ? trace_contention_end+0x39/0x120
[  127.505069][T10568]  ? __mutex_lock+0x335/0x1340
[  127.506743][T10568]  netlink_rcv_skb+0x208/0x470
[  127.508286][T10568]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  127.510023][T10568]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.511765][T10568]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.513455][T10568]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.515147][T10568]  xfrm_netlink_rcv+0x79/0x90
[  127.517029][T10568]  netlink_unicast+0x82f/0x9e0
[  127.518636][T10568]  ? __pfx_netlink_unicast+0x10/0x10
[  127.520472][T10568]  ? netlink_sendmsg+0x642/0xb30
[  127.522120][T10568]  ? skb_put+0x11b/0x210
[  127.523534][T10568]  netlink_sendmsg+0x805/0xb30
[  127.525168][T10568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.526975][T10568]  ? aa_sock_msg_perm+0x94/0x160
[  127.528607][T10568]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.530317][T10568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.531995][T10568]  __sock_sendmsg+0x21c/0x270
[  127.533530][T10568]  ____sys_sendmsg+0x505/0x830
[  127.535028][T10568]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.537060][T10568]  ? import_iovec+0x74/0xa0
[  127.538561][T10568]  ___sys_sendmsg+0x21f/0x2a0
[  127.540119][T10568]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.541796][T10568]  ? __fget_files+0x2a/0x420
[  127.543283][T10568]  ? __fget_files+0x3a0/0x420
[  127.544817][T10568]  __x64_sys_sendmsg+0x19b/0x260
[  127.546484][T10568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.548220][T10568]  ? rcu_is_watching+0x15/0xb0
[  127.549770][T10568]  ? do_syscall_64+0xbe/0x3b0
[  127.551297][T10568]  do_syscall_64+0xfa/0x3b0
[  127.552867][T10568]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.554614][T10568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.556972][T10568]  ? exc_page_fault+0x9f/0xf0
[  127.558539][T10568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.560505][T10568] RIP: 0033:0x7f0a8e18eb69
[  127.561986][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.568331][T10568] RSP: 002b:00007f0a8bff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.571000][T10568] RAX: ffffffffffffffda RBX: 00007f0a8e3b5fa0 RCX: 00007f0a8e18eb69
[  127.573628][T10568] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  127.576499][T10568] RBP: 00007f0a8e211df1 R08: 0000000000000000 R09: 0000000000000000
[  127.579114][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.581587][T10568] R13: 0000000000000000 R14: 00007f0a8e3b5fa0 R15: 00007ffe75c52388
[  127.584037][T10568]  </TASK>
[  127.585779][T10568] Kernel Offset: disabled
[  127.587151][T10568] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:53:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000009 RBX=0000000000100000 RCX=00000000000012c9 RDX=00000000000012c9
RSI=0000000000100000 RDI=ffffffff96234850 RBP=dffffc0000000000 RSP=ffffc90000067b88
R8 =0000000000000000 R9 =ffffffff81aa7ed8 R10=dffffc0000000000 R11=fffffbfff1f40f5f
R12=ffffffff96234aa8 R13=00000000000012c0 R14=00000000000012c0 R15=fffffffffffffe00
RIP=ffffffff84c3fe16 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7604174bc0 CR3=0000000028124000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fbad0612e17
XMM06=0000000000000000 00007fbad0612e11 XMM07=0000000000000000 00007fbad0612e25
XMM08=0000000000000000 00007fbad0612eab XMM09=0000000000000000 00007fbad0612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001117 RDI=0000000000001118 RBP=00000000000003f8 RSP=ffffc9000263e9f0
R8 =ffff888020348237 R9 =1ffff11004069046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591b R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0a8bff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000004c0 CR3=000000003abdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0a8e387498 00007f0a8e387470 XMM03=00007f0a8e3874a8 00007f0a8e3874a0
XMM04=00007f0a8eeed100 00007f0a8e387460 XMM05=00007f0a8e387478 00007f0a8e3874c0
XMM06=00007f0a8e3874b8 00007f0a8e3874b0 XMM07=00007f0a8e3874a8 00007f0a8e3874a0
XMM08=0000000000000000 00007f0a8e212eab XMM09=0000000000000000 00007f0a8e212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
