last executing test programs:

1.294523711s ago: executing program 1 (id=863):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x7c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040050}, 0x14800)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0x25a5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000009000000050000000400000048100000", @ANYRES32=r8, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100000001c82590448078aad070070000000000"], 0x50)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r10, 0xcfad5000)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x1000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r12)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1.237890322s ago: executing program 2 (id=864):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x9f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000006fc4ad4fe9d54046c11abf4b5d9490ca0ef31c44ef21beb4a400000000d1746f190b1b9a5cd5cf140ac51f0f66dbb9b48217c75b941906ea22103ee2b4b4f39ed5830e305526e3e0e40642c2a3acc8453801d53882f84fa0ee28303aed5b3c1a7d4d93b1b42be5a217bbb346656b3839d789580a74cc0411be66768a552ce28b0fe8c612e1fc803b03671b8a0b6fbcab5875d7c08aeab00f47df5ffd2ef23f50c1e4ef"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x1, 0x6, 0x3}, {0x7, 0x5, 0xc82}, {0xa, 0x7, 0x9}, {0x9, 0x8dc, 0x9}]}]}, {0x0, [0x7f, 0x30, 0x0]}}, &(0x7f0000000380)=""/187, 0x65, 0xbb, 0x0, 0x9}, 0x28)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000440))
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0xe94, 0x1, 0x1, 0x8}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb090018000000000000003000000030000000020000000000000001000004ffffffff0000000003000000110000004000000000000002000000000000000000000010020000000000"], 0x0, 0x4a}, 0x20)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f668000000000000240012800800010067726500180002800400120006000e0003000020060003"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.167373703s ago: executing program 2 (id=868):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) (async)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) (async)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004850)
r6 = accept4(r3, 0x0, 0x0, 0x0) (async)
socketpair(0xf, 0x800, 0x2, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
sendto$phonet(r7, &(0x7f0000000480)="a11be47c01e603b44de0839df0d0e0f99b7f5c97888957e42a1a191b6a6b99c8dc38d0475bbcb0410f85b5db08f0420a762482a243b0e333c1d6e5ce51a9087cd4679fac6e6585d8fff08805cbf62149ecbeba196860887ee9af5d952a62a207d99f75e7a81a87ff8fbad8209cece11d76c6241055c6639dec4ee639251e28ddc97845a707b762d0f95cf0b1a547fe7be1519ba312cd720c1f1b20a960e34e7984010ee89dd07c215c7809bef1513de3d106d6b56d90177d6b29f231745143", 0xbf, 0xc080, &(0x7f0000000540)={0x23, 0x9, 0x4, 0x4}, 0x10) (async)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) (async)
r8 = socket(0x840000000002, 0x3, 0xfa)
setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x20000)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000180)={0x9, [0x6, 0x800, 0x3, 0x6, 0x0, 0x101, 0x1, 0xec99, 0x9989]}, &(0x7f0000000300)=0x16) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2420000037264f31412f82", @ANYBLOB="616aa5462f3d2b96142a081aaaa05f9cab87cd697a6bf3db44b395b25261f998465d64f81f6eb754dfd5482cc4a25f", @ANYBLOB="08002cbd7000ffdbdf2514000000080009000100000005000b0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004081)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r9 = socket(0x11, 0x80a, 0x0)
getsockname$packet(r9, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44014}, 0x1)

1.076919226s ago: executing program 2 (id=870):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x2f}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="01567a247224"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r9, &(0x7f0000000280), 0x9)
r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000340)={0x70, 0x8, 0x0, 0x4, 0x0, [0x1020, 0x2, 0x7, 0x4]})
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_subtree(r11, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r6, 0x29, 0x30, 0x80, 0x6, 0x43, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x7800, 0x3, 0x200000a}})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xffffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)
socket$key(0xf, 0x3, 0x2)

950.29936ms ago: executing program 2 (id=872):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8919, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="3dccf02d212834b513b0b1799e2ad4c6a1f5ac030844d657dd7cdcd62928d1563b0e861c8311709c6ff7020a3c4383a1", @ANYRESDEC, @ANYRES64, @ANYBLOB="6048b6360eed06dcd92fe30ae07783daad698e8ae98182f670bd0cc7a9215d2a4d30af45c785264c14170d486d95fc591b32ee7a1cf18ddd4e994d59b6a56d565f7e51c0ef", @ANYBLOB="5651b863db6d981fcbe22016b05b6df9b19053f293e0cc50a8e38deb035dd60489c0a245ba1d01b40845b9516bb529fd3e2291f672fc10719ccbd811ef6d355c7e5e08d5fe49fadc54a9e59678bc399ea132e3221dcc8f5e6509b7224c66022f800dc17b4e32c7f6a87d4ec6e95eb93f5358ea853523ba70fafa5f476c0524f056e474baa496d419d17438d41f26358fdf123bbcd18925dd02904109e07d3debbc2b091a12bdcd874fafb842c45c0a7d8cd8e0c7b5e2310525161088a6132faf265037e3"], 0x128}, 0x81)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010428bd700002dcdf2507e089fe", @ANYRES32=r2, @ANYBLOB="8000e4090a000200bbbbbbbbbbbb000008000e800400"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

949.57696ms ago: executing program 0 (id=873):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=<r8=>0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r11=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000040)={r11}, &(0x7f0000000100)=0x8)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r12 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', <r13=>0x0})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x4160}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0x80000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0xb7a}, {0x0, 0x3, 0x7}, {}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x3}]}]}}}]}, 0x11c}}, 0x0)
r15 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r15, &(0x7f00000000c0)={0x27, r8, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60)
r16 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r16, 0x0, 0x9, &(0x7f0000000140)=""/137, &(0x7f0000000040)=0x89)
close(r7)

870.761358ms ago: executing program 2 (id=874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
read$alg(r4, &(0x7f0000000000)=""/35, 0x1c)
recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/73, 0x49}], 0x2, &(0x7f0000001300)=""/241, 0xf1}, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x79, 0x6, 0xa, 0x9, 0x7f6, 0x3f7149c7da788a56})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x6, 0x3, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ea2140d7be6927c83671105eb6f100"/32, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500090004000000"], 0x3c}}, 0x0)

866.11172ms ago: executing program 2 (id=875):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x6, &(0x7f0000000300)=@framed={{}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x6, &(0x7f0000000300)=@framed={{}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_modinfo})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r11, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async)
connect$rose(r11, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r11, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@null, @null, @null, @null, @bcast, @default]}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xa, 0x0, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0xba08}})

720.188322ms ago: executing program 0 (id=876):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r4, 0x40, 0x7800, 0xfffffff9, 0x9, {{0x1a, 0x4, 0x3, 0x27, 0x68, 0x66, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, {[@generic={0x88, 0xc, "58350122f3712549490c"}, @end, @end, @ssrr={0x89, 0x7, 0x3a, [@dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x9, [{@empty, 0x101}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}, {@empty, 0x3}, {@rand_addr=0x64010100}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x3}]}]}}}}})
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f0000000040))

650.744424ms ago: executing program 0 (id=877):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x5, 0x0, 0x0, 0x0, 0xf18fb234b68a349a, 0x2200}}, 0x1c}}, 0x50) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48)
close(r1)

649.611204ms ago: executing program 0 (id=878):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="cd462dbd7000fbcbdf250c0000000b000300", @ANYRES32=r0, @ANYBLOB="39bd6c1db08087f8f6830011f24c23433b185bcbe500000007002c"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040090)

590.663006ms ago: executing program 0 (id=879):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x800)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x10, 0x8) (async)
r1 = socket(0x25, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x66)
setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000000)=0xffffff00, 0x4) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) (async)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000080)={0x2000a212})

530.634386ms ago: executing program 0 (id=880):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @ringbuf_query, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @map_fd={0x18, 0xa}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x7a, &(0x7f0000000940)=""/122, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x10, 0xfffffff7, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, 0x1, r6], &(0x7f0000000c00)=[{0x1, 0x3, 0xa, 0xb}, {0x3, 0x2, 0x0, 0xb}, {0x5, 0x5, 0x1, 0x5}, {0x4, 0x2, 0x6, 0x9}]}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
write$cgroup_int(r9, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

378.852079ms ago: executing program 1 (id=881):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
gettid() (async, rerun: 64)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (rerun: 64)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250100000008000100030000002c000480050003000100000005000300010000000500030001000000050003000100000005000300070000000800020002000000"], 0x50}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x1, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x6, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0x0, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x400006}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x0, 0x3, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x29a4377a, 0xd, 0x7fffffff, 0xfffffc00}, {0x2, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x90000000, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x80000001, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x9, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x7, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x8998, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x8003ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0x81, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x0, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x4}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0xffff7fff, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000180))
clock_gettime(0x7, &(0x7f00000008c0)) (async, rerun: 64)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x5, 0x0, 0x0) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

219.498035ms ago: executing program 1 (id=882):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = socket$inet(0x2, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) (async)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'})
socket$kcm(0xa, 0x1, 0x106) (async)
r2 = socket$kcm(0xa, 0x1, 0x106)
shutdown(r2, 0x1) (async)
shutdown(r2, 0x1)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

216.959126ms ago: executing program 1 (id=883):
r0 = socket$packet(0x11, 0x3, 0x300)
sendto(r0, &(0x7f0000000040)="0600000000000000c8a92b0088a8", 0xe, 0x4000846, &(0x7f0000000380)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1fffe000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f3080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000001c0)={0x4cd3, 0x2, 0x6, 0x6}, 0x10)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @local}, 0x1, 0x0, 0x2, 0x3}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061113800000000002630000000000000950e000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x100}, 0x10}, 0x94)

110.157472ms ago: executing program 1 (id=884):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
socket$tipc(0x1e, 0x5, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x4}, {0x1, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}}, 0x200400d4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x47c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000680)=@req3={0xd, 0x8, 0x80000000, 0x4, 0x0, 0x5, 0x100}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000700)=0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x6, 0x2, 0x800, 0x100, 0x0, 0x100000, r6})
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=@raw=[@generic={0x1, 0x9, 0xc, 0x40, 0x3}, @call={0x85, 0x0, 0x0, 0x68}, @map_idx={0x18, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7, 0x93, &(0x7f0000000200)=""/147, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x12b61, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x1, 0x2, 0xf, 0xa}, {0x1, 0x5, 0x0, 0x3}, {0x2, 0x4, 0x3, 0x4}, {0x0, 0x4, 0xd, 0x4}, {0x5, 0x3, 0xf, 0x1}, {0x2, 0x5, 0x8, 0x8}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x50)

0s ago: executing program 1 (id=885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10) (async)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newchain={0x2c, 0x64, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xd}, {0x10, 0x4}, {0x1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xde}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newchain={0x2c, 0x64, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xd}, {0x10, 0x4}, {0x1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xde}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x14) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x14)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r1)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}}, 0x0)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16834' (ED25519) to the list of known hosts.
syzkaller login: [   49.193683][ T5771] cgroup: Unknown subsys name 'net'
[   49.302812][ T5771] cgroup: Unknown subsys name 'cpuset'
[   49.312512][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.505902][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.673778][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.677237][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.680675][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.683895][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.686906][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.701728][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.705724][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.710146][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.712925][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.715987][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.719381][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.722347][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.725889][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.729192][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.731832][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.051670][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   57.121935][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   57.133320][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   57.235667][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.239902][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.243077][ T5841] bridge_slave_0: entered allmulticast mode
[   57.247273][ T5841] bridge_slave_0: entered promiscuous mode
[   57.282130][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.285084][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.287915][ T5841] bridge_slave_1: entered allmulticast mode
[   57.292872][ T5841] bridge_slave_1: entered promiscuous mode
[   57.357727][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.362586][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.365537][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.368907][ T5845] bridge_slave_0: entered allmulticast mode
[   57.372768][ T5845] bridge_slave_0: entered promiscuous mode
[   57.391409][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.394291][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.397233][ T5849] bridge_slave_0: entered allmulticast mode
[   57.401119][ T5849] bridge_slave_0: entered promiscuous mode
[   57.407555][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.412904][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.415903][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.419539][ T5845] bridge_slave_1: entered allmulticast mode
[   57.423759][ T5845] bridge_slave_1: entered promiscuous mode
[   57.440597][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.443391][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.446114][ T5849] bridge_slave_1: entered allmulticast mode
[   57.451389][ T5849] bridge_slave_1: entered promiscuous mode
[   57.513724][ T5841] team0: Port device team_slave_0 added
[   57.519661][ T5841] team0: Port device team_slave_1 added
[   57.525189][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.544813][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.575742][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.581515][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.597287][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.600055][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.608997][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.632584][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.634741][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.642848][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.656875][ T5845] team0: Port device team_slave_0 added
[   57.664707][ T5845] team0: Port device team_slave_1 added
[   57.667737][ T5849] team0: Port device team_slave_0 added
[   57.694694][ T5849] team0: Port device team_slave_1 added
[   57.737837][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.740582][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.748655][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.753446][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.755618][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.764772][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.774569][ T5841] hsr_slave_0: entered promiscuous mode
[   57.777199][ T5841] hsr_slave_1: entered promiscuous mode
[   57.780935][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.783618][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.794749][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.817227][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.820282][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.829976][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.851207][ T5845] hsr_slave_0: entered promiscuous mode
[   57.854220][ T5845] hsr_slave_1: entered promiscuous mode
[   57.857064][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   57.859769][ T5845] Cannot create hsr debugfs directory
[   57.936767][ T5849] hsr_slave_0: entered promiscuous mode
[   57.940869][ T5849] hsr_slave_1: entered promiscuous mode
[   57.943248][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   57.945176][ T5849] Cannot create hsr debugfs directory
[   58.192125][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.209959][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.217187][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.233264][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.283031][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.294666][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.316969][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.332361][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.367603][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.381904][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.387703][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.404438][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.505558][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.540047][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.547538][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.557990][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.561056][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.579232][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.581552][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.592409][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   58.604686][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.607464][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.632369][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.635156][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.657171][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.701589][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   58.720574][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.723084][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.740307][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.743019][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.749369][ T5843] Bluetooth: hci1: command tx timeout
[   58.829743][ T5843] Bluetooth: hci2: command tx timeout
[   58.834073][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.839124][ T5843] Bluetooth: hci0: command tx timeout
[   58.871324][ T5841] veth0_vlan: entered promiscuous mode
[   58.883612][ T5841] veth1_vlan: entered promiscuous mode
[   58.903073][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.926324][ T5841] veth0_macvtap: entered promiscuous mode
[   58.937302][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.954898][ T5841] veth1_macvtap: entered promiscuous mode
[   58.977520][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.001900][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.010796][ T5845] veth0_vlan: entered promiscuous mode
[   59.022123][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.034506][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.042542][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.047456][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.054235][ T5845] veth1_vlan: entered promiscuous mode
[   59.080752][ T5849] veth0_vlan: entered promiscuous mode
[   59.110144][ T5849] veth1_vlan: entered promiscuous mode
[   59.136887][ T5845] veth0_macvtap: entered promiscuous mode
[   59.163719][ T5845] veth1_macvtap: entered promiscuous mode
[   59.173082][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.179670][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.203363][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.214367][ T5849] veth0_macvtap: entered promiscuous mode
[   59.225514][ T5849] veth1_macvtap: entered promiscuous mode
[   59.233876][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.236600][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.243003][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.250214][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.256314][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.264812][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.270916][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.277586][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.296499][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.323696][ T5908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.333798][ T5908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.343062][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.355854][ T5908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.367148][ T5908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.415582][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.425744][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.462348][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.465511][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.515443][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.523399][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.572536][ T5910] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.576191][ T5910] NCSI netlink: No device for ifindex 0
[   59.577983][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.582368][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.653426][ T5916] Zero length message leads to an empty skb
[   59.697914][ T5919] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.979093][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.983801][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   60.201669][ T5946] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET)
[   60.216940][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   60.770480][ T5968] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17'.
[   60.788814][ T5968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'.
[   60.829605][ T5843] Bluetooth: hci1: command tx timeout
[   60.885760][ T5975] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19'.
[   60.909112][ T5843] Bluetooth: hci0: command tx timeout
[   60.910524][ T5850] Bluetooth: hci2: command tx timeout
[   60.929504][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.992150][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   60.995510][ T5984] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   61.017991][ T5983] netlink: 'syz.0.22': attribute type 9 has an invalid length.
[   61.104483][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'.
[   61.229259][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.609117][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   61.815439][ T6019] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   62.908682][ T5850] Bluetooth: hci1: command tx timeout
[   62.990606][ T5850] Bluetooth: hci0: command tx timeout
[   62.991938][ T5843] Bluetooth: hci2: command tx timeout
[   63.451800][ T6069] 0: renamed from hsr0 (while UP)
[   63.463047][ T6069] 0: entered allmulticast mode
[   63.471495][ T6069] hsr_slave_0: entered allmulticast mode
[   63.475434][ T6069] hsr_slave_1: entered allmulticast mode
[   63.478030][ T6069] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   63.596838][ T5911] IPVS: starting estimator thread 0...
[   63.710350][ T6077] IPVS: using max 61 ests per chain, 146400 per kthread
[   63.776931][ T6094] bridge0: entered allmulticast mode
[   63.845017][ T6101] netlink: 'syz.0.60': attribute type 1 has an invalid length.
[   64.263826][ T6121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.410445][ T6121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.546969][ T6121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.672121][ T6121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.768304][ T6132] __nla_validate_parse: 7 callbacks suppressed
[   64.768318][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   64.790459][ T6132] tipc: Started in network mode
[   64.794781][ T6132] tipc: Node identity 86f5994ae47f, cluster identity 4711
[   64.801375][ T6132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.817645][ T5908] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.824536][ T6132] syzkaller0: entered promiscuous mode
[   64.827613][ T6132] syzkaller0: entered allmulticast mode
[   64.866076][ T5908] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.877269][ T6132] tipc: Resetting bearer <eth:syzkaller0>
[   64.881527][ T6131] tipc: Resetting bearer <eth:syzkaller0>
[   64.898816][ T6131] tipc: Disabling bearer <eth:syzkaller0>
[   64.957216][ T5908] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.964286][ T5908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.001404][ T5843] Bluetooth: hci1: command tx timeout
[   65.071198][ T5843] Bluetooth: hci2: command tx timeout
[   65.073365][ T5843] Bluetooth: hci0: command tx timeout
[   65.127596][ T6136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   65.163966][ T6136] netlink: 92 bytes leftover after parsing attributes in process `syz.2.71'.
[   65.167710][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'.
[   65.179546][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'.
[   65.224922][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   65.312100][ T6149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.74'.
[   65.395636][ T6156] gtp0: entered promiscuous mode
[   65.399490][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'.
[   66.196211][ T6193] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.91'.
[   66.283605][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[   66.552624][ T6207] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   67.030468][ T6233] ieee802154 phy0 wpan0: encryption failed: -90
[   67.036818][ T6234] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   67.048878][ T6234] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   67.893768][ T6258] netlink: 'syz.0.108': attribute type 21 has an invalid length.
[   67.950629][ T6268] netlink: 'syz.1.110': attribute type 5 has an invalid length.
[   68.059241][ T6279] kthread_run failed with err -4
[   68.642460][ T6314] syzkaller0: entered allmulticast mode
[   68.645510][ T6314] tipc: Started in network mode
[   68.647937][ T6314] tipc: Node identity 92be56f9b921, cluster identity 4711
[   68.650874][ T6314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.656079][ T6313] tipc: Disabling bearer <eth:syzkaller0>
[   68.814732][ T6321] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   69.158313][ T6324] delete_channel: no stack
[   69.579553][ T6330] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.593947][ T6330] bond1: (slave macvlan2): Opening slave failed
[   69.831547][ T6357] __nla_validate_parse: 14 callbacks suppressed
[   69.831567][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'.
[   69.889387][ T6357] batman_adv: batadv0: Adding interface: ipvlan2
[   69.892630][ T6357] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.902928][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.906471][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.911181][ T6357] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   70.291485][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'.
[   70.376245][ T6393] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   70.454442][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'.
[   70.608380][ T6415] netlink: 72 bytes leftover after parsing attributes in process `syz.1.155'.
[   70.621221][ T6415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.155'.
[   70.795559][ T6423] tipc: New replicast peer: 255.255.255.255
[   70.798960][ T6423] tipc: Enabled bearer <udp:s>, priority 10
[   70.866158][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'.
[   70.871065][ T6430] netlink: 64 bytes leftover after parsing attributes in process `syz.0.162'.
[   70.878089][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'.
[   70.891293][ T6430] bridge_slave_0: left allmulticast mode
[   70.893293][ T6430] bridge_slave_0: left promiscuous mode
[   70.895898][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.904525][ T6430] bridge_slave_1: left allmulticast mode
[   70.906708][ T6430] bridge_slave_1: left promiscuous mode
[   70.916644][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.944017][ T6430] bond0: (slave bond_slave_0): Releasing backup interface
[   70.950603][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'.
[   70.957095][ T6430] bond0: (slave bond_slave_1): Releasing backup interface
[   70.968365][ T6430] team0: Port device team_slave_0 removed
[   70.975790][ T6430] team0: Port device team_slave_1 removed
[   70.978059][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.981113][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.984801][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.987053][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.994976][ T6430] batman_adv: batadv0: Removing interface: ipvlan2
[   71.003101][ T6431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.155414][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.157535][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.158059][ T6446] syz.0.167: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   71.166360][ T6447] netlink: 200764 bytes leftover after parsing attributes in process `syz.1.165'.
[   71.171373][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(full) 
[   71.171392][ T6446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.171400][ T6446] Call Trace:
[   71.171411][ T6446]  <TASK>
[   71.171437][ T6446]  dump_stack_lvl+0x189/0x250
[   71.171463][ T6446]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.171481][ T6446]  ? __pfx__printk+0x10/0x10
[   71.171499][ T6446]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.171517][ T6446]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.171532][ T6446]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   71.171548][ T6446]  warn_alloc+0x214/0x310
[   71.171568][ T6446]  ? stack_depot_save_flags+0x41b/0x860
[   71.171586][ T6446]  ? __pfx_warn_alloc+0x10/0x10
[   71.171606][ T6446]  ? kasan_save_track+0x4f/0x80
[   71.171622][ T6446]  ? xskq_create+0x56/0x170
[   71.171636][ T6446]  ? xsk_init_queue+0xb0/0x110
[   71.171651][ T6446]  ? xsk_setsockopt+0x4dc/0x8d0
[   71.171662][ T6446]  ? do_sock_setsockopt+0x17c/0x1b0
[   71.171681][ T6446]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   71.171689][ T6446]  ? do_syscall_64+0xfa/0x3b0
[   71.171705][ T6446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.171721][ T6446]  __vmalloc_node_range_noprof+0x125/0x12f0
[   71.171756][ T6446]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   71.171776][ T6446]  ? __kasan_kmalloc+0x93/0xb0
[   71.171793][ T6446]  vmalloc_user_noprof+0xad/0xf0
[   71.171809][ T6446]  ? xskq_create+0xbf/0x170
[   71.171824][ T6446]  xskq_create+0xbf/0x170
[   71.171841][ T6446]  xsk_init_queue+0xb0/0x110
[   71.171857][ T6446]  xsk_setsockopt+0x4dc/0x8d0
[   71.171872][ T6446]  ? __pfx_xsk_setsockopt+0x10/0x10
[   71.171896][ T6446]  ? __pfx_aa_sk_perm+0x10/0x10
[   71.171917][ T6446]  ? aa_sock_opt_perm+0xff/0x1b0
[   71.171931][ T6446]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   71.171945][ T6446]  ? __pfx_xsk_setsockopt+0x10/0x10
[   71.171960][ T6446]  do_sock_setsockopt+0x17c/0x1b0
[   71.171980][ T6446]  __x64_sys_setsockopt+0x13f/0x1b0
[   71.171994][ T6446]  do_syscall_64+0xfa/0x3b0
[   71.172010][ T6446]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.172026][ T6446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.172037][ T6446]  ? exc_page_fault+0x9f/0xf0
[   71.172053][ T6446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.172064][ T6446] RIP: 0033:0x7f25f938ebe9
[   71.172077][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.172088][ T6446] RSP: 002b:00007f25fa260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   71.172102][ T6446] RAX: ffffffffffffffda RBX: 00007f25f95b5fa0 RCX: 00007f25f938ebe9
[   71.172110][ T6446] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[   71.172171][ T6446] RBP: 00007f25f9411e19 R08: 0000000000000004 R09: 0000000000000000
[   71.172179][ T6446] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.172186][ T6446] R13: 00007f25f95b6038 R14: 00007f25f95b5fa0 R15: 00007ffe1c165198
[   71.172207][ T6446]  </TASK>
[   71.172311][ T6446] Mem-Info:
[   71.285569][ T6446] active_anon:11535 inactive_anon:0 isolated_anon:0
[   71.285569][ T6446]  active_file:1116 inactive_file:38018 isolated_file:0
[   71.285569][ T6446]  unevictable:1768 dirty:1409 writeback:0
[   71.285569][ T6446]  slab_reclaimable:9303 slab_unreclaimable:51638
[   71.285569][ T6446]  mapped:18045 shmem:2432 pagetables:1194
[   71.285569][ T6446]  sec_pagetables:0 bounce:0
[   71.285569][ T6446]  kernel_misc_reclaimable:0
[   71.285569][ T6446]  free:298477 free_pcp:18176 free_cma:0
[   71.307697][ T6446] Node 0 active_anon:33780kB inactive_anon:0kB active_file:3696kB inactive_file:145868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30524kB dirty:5612kB writeback:0kB shmem:5108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5848kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.321754][ T6446] Node 1 active_anon:12360kB inactive_anon:0kB active_file:768kB inactive_file:6204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41656kB dirty:24kB writeback:0kB shmem:4620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5704kB pagetables:1980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.334306][ T6446] Node 0 DMA free:14540kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:668kB local_pcp:312kB free_cma:0kB
[   71.343691][ T6446] lowmem_reserve[]: 0 811 811 811 811
[   71.345502][ T6446] Node 0 DMA32 free:281844kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33780kB inactive_anon:0kB active_file:3696kB inactive_file:145868kB unevictable:3536kB writepending:5612kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:24944kB local_pcp:10824kB free_cma:0kB
[   71.357442][ T6446] lowmem_reserve[]: 0 0 0 0 0
[   71.359528][ T6446] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   71.370967][ T6446] lowmem_reserve[]: 0 0 854 854 854
[   71.373276][ T6446] Node 1 Normal free:439032kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12360kB inactive_anon:0kB active_file:768kB inactive_file:6204kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46876kB local_pcp:13452kB free_cma:0kB
[   71.385480][ T6446] lowmem_reserve[]: 0 0 0 0 0
[   71.387474][ T6446] Node 0 DMA: 9*4kB (UM) 7*8kB (U) 7*16kB (U) 8*32kB (U) 6*64kB (U) 9*128kB (UM) 7*256kB (UM) 9*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 14540kB
[   71.395061][ T6446] Node 0 DMA32: 1*4kB (M) 210*8kB (UE) 404*16kB (UE) 171*32kB (UE) 190*64kB (UME) 163*128kB (UM) 147*256kB (UM) 132*512kB (UME) 107*1024kB (UM) 4*2048kB (UM) 3*4096kB (M) = 281908kB
[   71.402818][ T6446] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   71.409873][ T6446] Node 1 Normal: 800*4kB (UM) 389*8kB (UM) 613*16kB (UM) 531*32kB (UME) 326*64kB (UME) 188*128kB (UME) 152*256kB (U) 133*512kB (UME) 82*1024kB (UME) 1*2048kB (U) 41*4096kB (M) = 439000kB
[   71.417191][ T6446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.420914][ T6446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.424444][ T6446] 41566 total pagecache pages
[   71.426338][ T6446] 0 pages in swap cache
[   71.428006][ T6446] Free swap  = 124996kB
[   71.430581][ T6446] Total swap = 124996kB
[   71.432299][ T6446] 786301 pages RAM
[   71.433804][ T6446] 0 pages HighMem/MovableOnly
[   71.435675][ T6446] 241330 pages reserved
[   71.437106][ T6446] 0 pages cma reserved
[   71.657132][ T6450] netlink: 'syz.0.168': attribute type 13 has an invalid length.
[   71.668189][ T6450] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   71.903127][ T6462] netlink: 'syz.0.172': attribute type 10 has an invalid length.
[   71.919841][ T5846] tipc: Node number set to 731862777
[   71.995696][ T6464] netlink: 'syz.2.173': attribute type 11 has an invalid length.
[   71.998064][ T6464] netlink: 'syz.2.173': attribute type 4 has an invalid length.
[   72.097101][ T6474] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   72.110483][ T6474] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   72.364339][ T6486] netlink: 'syz.2.182': attribute type 13 has an invalid length.
[   72.883878][ T6526] bridge0: port 3(vlan2) entered blocking state
[   72.886337][ T6526] bridge0: port 3(vlan2) entered disabled state
[   72.889661][ T6526] vlan2: entered allmulticast mode
[   72.893190][ T6526] bridge0: entered allmulticast mode
[   72.906950][ T6526] vlan2: left allmulticast mode
[   72.910114][ T6526] bridge0: left allmulticast mode
[   73.225856][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.229873][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.628046][ T6556] netlink: 'syz.1.206': attribute type 20 has an invalid length.
[   73.641375][ T6556] netlink: 'syz.1.206': attribute type 20 has an invalid length.
[   73.641404][ T5858] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.648877][ T5858] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.654295][ T5858] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.657972][ T5858] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.778383][ T6564] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   73.785405][ T6564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.823462][ T6566] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   74.524633][ T6576] geneve2: entered allmulticast mode
[   74.530538][ T5858] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   74.533824][ T5858] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   74.536902][ T5858] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   74.572806][ T5858] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   74.835182][ T6601] pim6reg: entered allmulticast mode
[   74.840854][ T6600] pim6reg: left allmulticast mode
[   74.926036][ T6609] netlink: 'syz.1.220': attribute type 1 has an invalid length.
[   74.963118][ T6609] bond2: entered promiscuous mode
[   74.965500][ T6609] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.223515][ T6626] __nla_validate_parse: 18 callbacks suppressed
[   75.223538][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'.
[   75.242826][ T6626] bond0: entered promiscuous mode
[   75.244822][ T6626] bond_slave_0: entered promiscuous mode
[   75.247200][ T6626] bond_slave_1: entered promiscuous mode
[   75.255457][ T6626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.225'.
[   75.281332][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.226'.
[   75.348166][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'.
[   75.363361][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[   75.514050][ T6647] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   75.722542][ T6658] netlink: 'syz.2.231': attribute type 4 has an invalid length.
[   76.784596][ T6686] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   76.789990][ T6683] netlink: 260 bytes leftover after parsing attributes in process `syz.2.239'.
[   76.796317][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.239'.
[   76.800987][ T6683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.239'.
[   76.952028][ T6687] infiniband syz1: set active
[   76.954081][ T6687] infiniband syz1: added macvlan1
[   76.992953][ T6687] RDS/IB: syz1: added
[   76.994691][ T6687] smc: adding ib device syz1 with port count 1
[   76.996810][ T6687] smc:    ib device syz1 port 1 has pnetid 
[   77.237988][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'.
[   77.242066][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'.
[   77.251526][ T6712] bridge0: port 3(vlan2) entered blocking state
[   77.253985][ T6712] bridge0: port 3(vlan2) entered disabled state
[   77.256345][ T6712] vlan2: entered allmulticast mode
[   77.258293][ T6712] bridge0: entered allmulticast mode
[   77.264293][ T6712] vlan2: left allmulticast mode
[   77.266122][ T6712] bridge0: left allmulticast mode
[   78.050793][ T6744] openvswitch: netlink: Flow key attr not present in new flow.
[   78.111811][ T6748] netlink: 'syz.0.258': attribute type 9 has an invalid length.
[   78.116220][ T6748] netlink: 'syz.0.258': attribute type 7 has an invalid length.
[   78.124648][ T6748] netlink: 'syz.0.258': attribute type 8 has an invalid length.
[   79.283323][ T6783] netlink: 'syz.0.266': attribute type 10 has an invalid length.
[   79.318070][ T6783] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   80.578640][ T6841] __nla_validate_parse: 11 callbacks suppressed
[   80.578656][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   80.613983][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   80.691520][ T6848] netlink: 'syz.1.279': attribute type 21 has an invalid length.
[   80.694264][ T6848] netlink: 128 bytes leftover after parsing attributes in process `syz.1.279'.
[   80.697216][ T6848] netlink: 'syz.1.279': attribute type 4 has an invalid length.
[   80.703167][ T6848] netlink: 'syz.1.279': attribute type 5 has an invalid length.
[   80.706094][ T6848] netlink: 3 bytes leftover after parsing attributes in process `syz.1.279'.
[   81.190529][ T6868] netlink: 'syz.0.285': attribute type 3 has an invalid length.
[   81.193017][ T6868] netlink: 177248 bytes leftover after parsing attributes in process `syz.0.285'.
[   81.243938][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[   81.250643][ T6871] hsr_slave_0: left promiscuous mode
[   81.258229][ T6871] hsr_slave_1: left promiscuous mode
[   81.305678][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[   81.404882][   T96] cfg80211: failed to load regulatory.db
[   81.425111][ T6882] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.291'.
[   81.583920][ T6891] netlink: 56 bytes leftover after parsing attributes in process `syz.1.294'.
[   81.666497][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'.
[   81.767439][ T6904] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.112993][ T6925] netlink: 'syz.1.303': attribute type 10 has an invalid length.
[   82.116008][ T6925] team0: entered promiscuous mode
[   82.117660][ T6925] team_slave_0: entered promiscuous mode
[   82.120723][ T6925] team_slave_1: entered promiscuous mode
[   82.122649][ T6925] bridge0: port 3(team0) entered blocking state
[   82.124883][ T6925] bridge0: port 3(team0) entered disabled state
[   82.127266][ T6925] team0: entered allmulticast mode
[   82.128936][ T6925] team_slave_0: entered allmulticast mode
[   82.130717][ T6925] team_slave_1: entered allmulticast mode
[   82.134313][ T6925] bridge0: port 3(team0) entered blocking state
[   82.136572][ T6925] bridge0: port 3(team0) entered forwarding state
[   82.175549][ T6925] bridge4: entered promiscuous mode
[   82.177590][ T6925] bridge4: entered allmulticast mode
[   82.179106][ T6931] netlink: 'syz.2.305': attribute type 83 has an invalid length.
[   82.384981][ T6948] bond0: left promiscuous mode
[   82.386677][ T6948] bond_slave_0: left promiscuous mode
[   82.390017][ T6948] bond_slave_1: left promiscuous mode
[   82.414404][ T6948] bond2: left promiscuous mode
[   82.416781][ T6948] bridge4: left promiscuous mode
[   82.685711][ T6963] openvswitch: netlink: ufid size 145 bytes exceeds the range (1, 16)
[   82.694005][ T6963] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   83.115403][   T33] audit: type=1107 audit(1755624297.708:2): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   83.299182][ T6994] validate_nla: 2 callbacks suppressed
[   83.299213][ T6994] netlink: 'syz.0.323': attribute type 3 has an invalid length.
[   83.364771][ T6994] netlink: 'syz.0.323': attribute type 1 has an invalid length.
[   83.583550][ T7011] netlink: 'syz.1.330': attribute type 10 has an invalid length.
[   83.591231][ T7018] netlink: 'syz.0.331': attribute type 13 has an invalid length.
[   83.600493][ T7011] veth0_vlan: left promiscuous mode
[   83.604531][ T7011] veth0_vlan: entered promiscuous mode
[   83.612442][ T7011] team0: Device veth0_vlan failed to register rx_handler
[   84.021746][   T24] syz1: Port: 1 Link DOWN
[   84.046679][ T7019] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   84.051584][ T5908] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.055097][ T5908] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   84.067788][ T5908] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.076009][ T5908] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   84.100591][ T5908] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.103214][ T5908] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   84.106060][ T5908] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.128559][ T5908] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   84.718237][ T7082] pim6reg1: entered promiscuous mode
[   84.721534][ T7082] pim6reg1: entered allmulticast mode
[   84.988711][   T33] audit: type=1800 audit(1755624299.578:3): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.352" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=625 res=0 errno=0
[   85.199577][ T7115] bond0: entered promiscuous mode
[   85.210240][ T7115] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   85.219658][ T7115] bond0: left promiscuous mode
[   85.224715][ T7115] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   85.381891][ T7127] syz.2.358 uses old SIOCAX25GETINFO
[   85.493268][ T7142] netlink: 'syz.2.363': attribute type 7 has an invalid length.
[   85.665345][ T7153] __nla_validate_parse: 18 callbacks suppressed
[   85.665367][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.365'.
[   85.697695][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'.
[   85.719140][ T7150] nbd0: detected capacity change from 0 to 127
[   85.737180][   T55] block nbd0: Receive control failed (result -104)
[   85.783796][ T7163] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   85.919534][ T7169] netlink: 'syz.2.371': attribute type 4 has an invalid length.
[   86.056099][ T7180] bridge0: port 4(erspan0) entered blocking state
[   86.060083][ T7180] bridge0: port 4(erspan0) entered disabled state
[   86.063159][ T7180] erspan0: entered allmulticast mode
[   86.067964][ T7180] erspan0: entered promiscuous mode
[   86.073652][ T7180] bridge0: port 4(erspan0) entered blocking state
[   86.076579][ T7180] bridge0: port 4(erspan0) entered forwarding state
[   86.102452][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'.
[   86.136741][ T7187] erspan0: left allmulticast mode
[   86.139526][ T7187] erspan0: left promiscuous mode
[   86.142907][ T7187] bridge0: port 4(erspan0) entered disabled state
[   86.288981][ T7197] geneve3: entered promiscuous mode
[   86.294608][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.298230][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.306131][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.312885][ T7198] netlink: 144 bytes leftover after parsing attributes in process `syz.2.380'.
[   86.317607][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.427772][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'.
[   86.433164][ T7207] netlink: 'syz.1.383': attribute type 7 has an invalid length.
[   86.436148][ T7207] netlink: 'syz.1.383': attribute type 8 has an invalid length.
[   86.440488][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   86.462343][ T7209] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[   86.506266][ T7211] netlink: 64 bytes leftover after parsing attributes in process `syz.0.385'.
[   86.596183][ T7215] netlink: 128 bytes leftover after parsing attributes in process `syz.1.387'.
[   86.613311][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.616502][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.635237][ T7215] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.640588][ T7215] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.651857][ T7213] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   86.654383][  T972] IPVS: starting estimator thread 0...
[   86.664280][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.666945][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.738633][ T7217] IPVS: using max 61 ests per chain, 146400 per kthread
[   86.934755][ T7221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.388'.
[   86.939144][ T7220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.388'.
[   87.870668][ T7279] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.874747][ T7279] bond0: (slave bond2): Enslaving as an active interface with an up link
[   88.358295][ T7282] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   89.455226][ T7335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.462727][ T7335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.553353][ T7335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.557395][ T7335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.644018][ T7335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.648005][ T7335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.721325][ T7335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.725399][ T7335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.804215][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.808188][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.836857][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.839849][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.842578][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.848019][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.858256][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.863416][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.903858][ T7361] openvswitch: netlink: Multiple metadata blocks provided
[   89.986247][ T7364] pimreg: entered allmulticast mode
[   90.132074][ T7380] geneve0: entered allmulticast mode
[   90.155036][ T7379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.160999][ T7379] syzkaller0: entered promiscuous mode
[   90.163341][ T7379] syzkaller0: entered allmulticast mode
[   90.181602][ T7379] tipc: Resetting bearer <eth:syzkaller0>
[   90.186400][ T7377] tipc: Resetting bearer <eth:syzkaller0>
[   90.202585][ T7377] tipc: Disabling bearer <eth:syzkaller0>
[   90.276827][ T7387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.280330][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.315893][ T7391] nbd: must specify at least one socket
[   90.564062][ T7420] : entered promiscuous mode
[   90.636569][ T7422] Bluetooth: MGMT ver 1.23
[   90.737857][ T7432] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   90.984510][ T7452] nbd: must specify a size in bytes for the device
[   91.616082][ T7492] netlink: 'syz.1.474': attribute type 10 has an invalid length.
[   91.620305][ T7492] __nla_validate_parse: 8 callbacks suppressed
[   91.620314][ T7492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.474'.
[   91.626356][ T7492] dummy0: entered promiscuous mode
[   91.628201][ T7492] dummy0: entered allmulticast mode
[   91.634762][ T7492] bridge0: port 4(dummy0) entered blocking state
[   91.636963][ T7492] bridge0: port 4(dummy0) entered disabled state
[   91.640863][ T7492] bridge0: port 4(dummy0) entered blocking state
[   91.642962][ T7492] bridge0: port 4(dummy0) entered listening state
[   91.924920][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.928185][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.985680][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'.
[   92.390404][ T7529] netlink: 228 bytes leftover after parsing attributes in process `syz.0.486'.
[   92.594422][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'.
[   92.766121][ T7544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.492'.
[   92.871947][ T7555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.495'.
[   92.922593][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.497'.
[   92.988407][ T7561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.497'.
[   93.080694][ T7571] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.234851][ T7579] tipc: Started in network mode
[   93.236507][ T7579] tipc: Node identity ea1b724584db, cluster identity 4711
[   93.240016][ T7579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.243778][ T7579] syzkaller0: entered promiscuous mode
[   93.246553][ T7579] syzkaller0: entered allmulticast mode
[   93.259813][ T7579] tipc: Resetting bearer <eth:syzkaller0>
[   93.263702][ T7578] tipc: Resetting bearer <eth:syzkaller0>
[   93.274124][ T7578] tipc: Disabling bearer <eth:syzkaller0>
[   93.663792][ T7607] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   93.880903][ T7618] Driver unsupported XDP return value 0 on prog  (id 141) dev N/A, expect packet loss!
[   93.980824][ T7623] Bluetooth: MGMT ver 1.23
[   94.051960][ T7627] bridge0: port 5(vlan2) entered blocking state
[   94.054598][ T7627] bridge0: port 5(vlan2) entered disabled state
[   94.057125][ T7627] vlan2: entered allmulticast mode
[   94.060186][ T7627] bridge0: entered allmulticast mode
[   94.065847][ T7627] vlan2: left allmulticast mode
[   94.067806][ T7627] bridge0: left allmulticast mode
[   94.201107][ T7630] macsec1: entered allmulticast mode
[   94.203238][ T7630] bond0: entered allmulticast mode
[   94.205284][ T7630] bond_slave_0: entered allmulticast mode
[   94.207458][ T7630] bond_slave_1: entered allmulticast mode
[   94.244520][ T7632] sctp: [Deprecated]: syz.2.519 (pid 7632) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.244520][ T7632] Use struct sctp_sack_info instead
[   94.615035][ T7644] netlink: 'syz.2.523': attribute type 1 has an invalid length.
[   94.666414][ T7644] bond2: (slave bridge5): making interface the new active one
[   94.671590][ T7644] bond2: (slave bridge5): Enslaving as an active interface with an up link
[   94.806228][ T7669] netlink: 'syz.1.527': attribute type 1 has an invalid length.
[   95.012966][ T7680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.080499][ T7686] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[   95.321744][ T7702] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   95.544685][ T7710] netlink: 'syz.1.539': attribute type 2 has an invalid length.
[   95.837543][ T7717] netlink: 'syz.0.541': attribute type 3 has an invalid length.
[   95.907920][ T7719] netlink: 'syz.0.542': attribute type 1 has an invalid length.
[   95.953925][ T7719] bond3: entered promiscuous mode
[   95.955963][ T7719] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.970530][ T7721] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.973934][ T7721] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   95.977630][ T7721] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   95.984810][ T7721] bond3: (slave wireguard0): making interface the new active one
[   95.987288][ T7721] wireguard0: entered promiscuous mode
[   95.990702][ T7721] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   96.222019][   T33] audit: type=1804 audit(1755624310.818:4): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.548" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=885 res=1 errno=0
[   96.237628][   T33] audit: type=1800 audit(1755624310.818:5): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.548" name="cgroup.controllers" dev="tmpfs" ino=885 res=0 errno=0
[   96.631104][ T7767] __nla_validate_parse: 22 callbacks suppressed
[   96.631121][ T7767] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.556'.
[   96.682838][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'.
[   96.796475][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[   96.808653][ T7774] netlink: 'syz.1.559': attribute type 20 has an invalid length.
[   96.812122][ T7774] netlink: 'syz.1.559': attribute type 21 has an invalid length.
[   97.125617][ T7787] netlink: 14679 bytes leftover after parsing attributes in process `syz.1.564'.
[   97.277196][ T7799] netlink: 56 bytes leftover after parsing attributes in process `syz.1.569'.
[   98.182969][ T7827] netlink: 'syz.2.575': attribute type 21 has an invalid length.
[   98.670425][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   98.674448][ T7807] netlink: 'syz.1.572': attribute type 1 has an invalid length.
[   98.681999][ T7810] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.687018][ T7827] netlink: 156 bytes leftover after parsing attributes in process `syz.2.575'.
[   98.850561][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[   98.872249][ T7835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.938704][ T7830] tipc: Disabling bearer <eth:syzkaller0>
[   99.035934][ T7842] netlink: 'syz.2.581': attribute type 2 has an invalid length.
[   99.042665][ T7842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.581'.
[   99.145511][ T7851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.584'.
[   99.153022][ T7851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.584'.
[   99.262305][ T7859] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[   99.296808][ T7859] bond5: (slave gretap2): making interface the new active one
[   99.301005][ T7859] bond5: (slave gretap2): Enslaving as an active interface with an up link
[   99.450031][ T7865] netlink: 'syz.0.589': attribute type 9 has an invalid length.
[   99.550102][ T7874] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   99.552810][ T7874] openvswitch: netlink: Duplicate key (type 0).
[   99.593984][ T7876] netlink: 'syz.0.593': attribute type 14 has an invalid length.
[   99.626167][ T7876] netlink: 'syz.0.593': attribute type 14 has an invalid length.
[   99.795769][ T7893] netlink: del zone limit has 4 unknown bytes
[  100.108807][ T7924] netlink: 'syz.0.607': attribute type 9 has an invalid length.
[  100.331595][ T7938] veth1_to_bridge: entered promiscuous mode
[  100.335949][ T7938] veth1_to_bridge: left promiscuous mode
[  100.582238][ T7946] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  101.227362][ T7962] tipc: Enabling <ib:lo> not permitted
[  101.230241][ T7962] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  101.503564][ T7981] block nbd1: server does not support multiple connections per device.
[  101.511248][ T7981] block nbd1: shutting down sockets
[  101.902600][ T8014] batadv1: entered promiscuous mode
[  102.045770][ T8020] __nla_validate_parse: 10 callbacks suppressed
[  102.045787][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'.
[  102.299490][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[  102.742430][ T8038] validate_nla: 3 callbacks suppressed
[  102.742448][ T8038] netlink: 'syz.1.637': attribute type 1 has an invalid length.
[  103.395694][ T8042] netlink: 'syz.1.638': attribute type 6 has an invalid length.
[  103.426733][ T8042] netlink: 'syz.1.638': attribute type 6 has an invalid length.
[  103.808396][ T8087] netlink: 152 bytes leftover after parsing attributes in process `syz.2.650'.
[  103.811787][ T8087] block nbd0: must specify backend
[  104.366891][ T8109] netlink: 244 bytes leftover after parsing attributes in process `syz.0.654'.
[  104.371594][ T8110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.376057][ T8109] openvswitch: netlink: Flow key attr not present in new flow.
[  104.382702][ T8111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.386959][ T8110] syzkaller0: entered promiscuous mode
[  104.398711][ T8110] syzkaller0: entered allmulticast mode
[  104.402598][ T8109] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.440190][ T8110] tipc: Resetting bearer <eth:syzkaller0>
[  104.444433][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[  104.469381][ T8108] tipc: Disabling bearer <eth:syzkaller0>
[  104.486813][ T8114] netlink: 'syz.0.655': attribute type 1 has an invalid length.
[  104.491503][ T8113] netlink: 'syz.0.655': attribute type 1 has an invalid length.
[  104.540733][ T8114] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.574114][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  104.581171][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'.
[  104.651765][ T8113] bond6: (slave gretap3): making interface the new active one
[  104.656161][ T8113] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  104.764755][ T8125] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.659'.
[  104.803689][ T8128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.660'.
[  104.836918][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'.
[  105.284564][ T8145] netlink: 84 bytes leftover after parsing attributes in process `syz.1.665'.
[  105.609040][ T8167] netlink: 'syz.0.671': attribute type 11 has an invalid length.
[  105.817662][ T8179] bridge0: port 3(veth0_to_bridge) entered blocking state
[  105.820869][ T8179] bridge0: port 3(veth0_to_bridge) entered disabled state
[  105.823899][ T8179] veth0_to_bridge: entered allmulticast mode
[  105.827886][ T8179] veth0_to_bridge: entered promiscuous mode
[  105.978234][ T8187] netlink: 'syz.1.679': attribute type 10 has an invalid length.
[  105.985571][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.989243][ T8187] batadv0: entered allmulticast mode
[  105.991883][ T8187] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  105.996325][ T8187] netlink: 'syz.1.679': attribute type 10 has an invalid length.
[  105.999221][ T8187] batadv0: entered promiscuous mode
[  106.001985][ T8187] bond0: (slave batadv0): Releasing backup interface
[  106.005946][ T8187] bridge0: port 5(batadv0) entered blocking state
[  106.009417][ T8187] bridge0: port 5(batadv0) entered disabled state
[  106.278884][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  106.282696][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  106.582651][ T8200] team0: entered promiscuous mode
[  106.657958][ T8214] netlink: 'syz.1.687': attribute type 9 has an invalid length.
[  106.792742][ T8221] delete_channel: no stack
[  106.802809][ T8226] macsec1: entered promiscuous mode
[  106.840347][ T8229] veth2: entered allmulticast mode
[  106.999768][    C0] bridge0: port 4(dummy0) entered learning state
[  107.171382][ T8250] netlink: 'syz.0.697': attribute type 30 has an invalid length.
[  107.241255][ T8258] __nla_validate_parse: 9 callbacks suppressed
[  107.241272][ T8258] netlink: 9196 bytes leftover after parsing attributes in process `syz.0.698'.
[  107.294346][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'.
[  107.508917][ T8278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.702'.
[  107.733421][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  107.815826][ T8301] netlink: 'syz.1.709': attribute type 10 has an invalid length.
[  107.819086][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'.
[  107.822810][ T8301] veth0_vlan: left promiscuous mode
[  107.824808][ T8301] veth0_vlan: entered promiscuous mode
[  107.826910][ T8301] veth0_vlan: entered allmulticast mode
[  107.832508][ T8301] bridge0: port 6(veth0_vlan) entered blocking state
[  107.836523][ T8301] bridge0: port 6(veth0_vlan) entered disabled state
[  107.841756][ T8301] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  107.853821][ T5846] syz1: Port: 1 Link ACTIVE
[  107.944313][ T8308] netlink: 'syz.1.711': attribute type 29 has an invalid length.
[  107.947303][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'.
[  107.954544][ T8308] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  107.968274][ T8314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.991638][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[  108.398422][ T8359] netlink: 'syz.2.723': attribute type 4 has an invalid length.
[  108.456784][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[  108.595585][ T8369] syzkaller1: entered promiscuous mode
[  108.601377][ T8369] syzkaller1: entered allmulticast mode
[  108.743646][ T8384] netlink: 'syz.2.730': attribute type 62 has an invalid length.
[  108.748834][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'.
[  108.805681][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'.
[  108.820298][ T8390] syzkaller0: entered promiscuous mode
[  108.822353][ T8390] syzkaller0: entered allmulticast mode
[  109.370421][ T8375] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  109.795167][ T8409] netlink: 'syz.1.738': attribute type 13 has an invalid length.
[  109.903867][ T8409] bridge0: port 4(dummy0) entered disabled state
[  109.906038][ T8409] bridge0: port 3(team0) entered disabled state
[  109.908647][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.912098][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.050487][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.062272][ T8409] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.194514][ T8409] bond0: left allmulticast mode
[  110.196096][ T8409] bond_slave_0: left allmulticast mode
[  110.199482][ T8409] bond_slave_1: left allmulticast mode
[  110.214374][ T8411] batadv0: entered promiscuous mode
[  110.216309][ T8411] macvtap1: entered allmulticast mode
[  110.218028][ T8411] batadv0: entered allmulticast mode
[  110.221151][ T8411] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  110.224898][ T8411] batadv0: left allmulticast mode
[  110.226932][ T8411] batadv0: left promiscuous mode
[  110.253993][   T96] syz1: Port: 1 Link DOWN
[  110.254030][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.258836][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.265186][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.267884][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.280650][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.283425][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.285995][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.296442][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.547370][ T8453] netlink: zone id is out of range
[  110.550046][ T8453] netlink: zone id is out of range
[  110.552117][ T8453] netlink: zone id is out of range
[  110.554191][ T8453] netlink: zone id is out of range
[  110.556259][ T8453] netlink: zone id is out of range
[  110.558295][ T8453] netlink: zone id is out of range
[  110.563075][ T8453] netlink: zone id is out of range
[  110.565184][ T8453] netlink: zone id is out of range
[  110.588778][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.622589][ T8451] delete_channel: no stack
[  111.358285][ T8480] netlink: 'syz.2.755': attribute type 15 has an invalid length.
[  111.452193][ T8485] netlink: 'syz.2.757': attribute type 30 has an invalid length.
[  111.501393][ T8487] sctp: [Deprecated]: syz.1.758 (pid 8487) Use of int in maxseg socket option.
[  111.501393][ T8487] Use struct sctp_assoc_value instead
[  111.517568][ T8487] netlink: 'syz.1.758': attribute type 14 has an invalid length.
[  111.528605][ T8487] netlink: 'syz.1.758': attribute type 11 has an invalid length.
[  111.616560][ T8489] netlink: 'syz.1.759': attribute type 4 has an invalid length.
[  112.509207][ T8498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.685230][ T8533] __nla_validate_parse: 17 callbacks suppressed
[  112.685251][ T8533] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.768'.
[  112.806045][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'.
[  112.877579][ T8549] ieee802154 phy0 wpan0: encryption failed: -22
[  112.954851][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  112.958417][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'.
[  113.005858][ T8553] validate_nla: 2 callbacks suppressed
[  113.005870][ T8553] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  113.011166][ T8553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.778'.
[  113.014076][ T8553] netlink: 'syz.0.778': attribute type 2 has an invalid length.
[  113.016459][ T8553] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  113.020042][ T8553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.778'.
[  113.024477][ T8554] @: renamed from bond_slave_0
[  113.316364][ T8575] veth0_vlan: left allmulticast mode
[  113.322006][ T8575] bridge4: left allmulticast mode
[  113.326553][ T8575] macsec1: left allmulticast mode
[  113.332503][ T8575] @: renamed from veth0_vlan
[  113.655291][ T8597] netlink: 'syz.2.791': attribute type 12 has an invalid length.
[  113.658299][ T8597] netlink: 'syz.2.791': attribute type 29 has an invalid length.
[  113.661542][ T8597] netlink: 148 bytes leftover after parsing attributes in process `syz.2.791'.
[  113.665639][ T8597] netlink: 'syz.2.791': attribute type 12 has an invalid length.
[  113.669322][ T8597] netlink: 'syz.2.791': attribute type 29 has an invalid length.
[  113.672373][ T8597] netlink: 148 bytes leftover after parsing attributes in process `syz.2.791'.
[  113.866334][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  113.866571][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  114.083506][ T8619] 8021q: VLANs not supported on ip6_vti0
[  114.363496][ T8646] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20003
[  114.403279][ T8650] netlink: 'syz.2.812': attribute type 11 has an invalid length.
[  114.719760][ T8667] netlink: 'syz.2.818': attribute type 21 has an invalid length.
[  114.802250][ T8669] net_ratelimit: 6 callbacks suppressed
[  114.802265][ T8669] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  114.879923][ T8675] bridge0: port 4(erspan0) entered blocking state
[  114.882397][ T8675] bridge0: port 4(erspan0) entered disabled state
[  114.884525][ T8675] erspan0: entered allmulticast mode
[  114.887032][ T8675] erspan0: entered promiscuous mode
[  114.998521][ T8683] bridge0: port 4(erspan0) entered blocking state
[  115.001183][ T8683] bridge0: port 4(erspan0) entered listening state
[  115.003865][ T8683] bridge0: port 3(veth0_to_bridge) entered blocking state
[  115.006762][ T8683] bridge0: port 3(veth0_to_bridge) entered listening state
[  115.009847][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.012697][ T8683] bridge0: port 2(bridge_slave_1) entered listening state
[  115.015611][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.018516][ T8683] bridge0: port 1(bridge_slave_0) entered listening state
[  115.028258][ T8683] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.032236][ T8683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.103103][ T8687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.105740][ T8687] syzkaller0: entered promiscuous mode
[  115.107671][ T8687] syzkaller0: entered allmulticast mode
[  115.116572][ T8687] ip6_vti0: mtu less than device minimum
[  115.122443][ T8686] tipc: Resetting bearer <eth:syzkaller0>
[  115.132574][ T8686] tipc: Disabling bearer <eth:syzkaller0>
[  115.226560][ T8691] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  115.337004][ T8703] team0: No ports can be present during mode change
[  115.460422][ T8709] smc: net device bond0 applied user defined pnetid SYZ2
[  115.571585][ T8709] smc: removing net device bond0 with user defined pnetid SYZ2
[  115.575772][ T8709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.581227][ T8709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.584503][ T8709] bond0 (unregistering): Released all slaves
[  115.807421][ T8738] IPVS: length: 209 != 24
[  115.954519][ T1115] block nbd0: Possible stuck request ffff888022da8000: control (read@0,1024B). Runtime 30 seconds
[  115.960622][ T1115] block nbd0: Possible stuck request ffff888022da8200: control (read@1024,1024B). Runtime 30 seconds
[  115.964640][ T1115] block nbd0: Possible stuck request ffff888022da8400: control (read@2048,1024B). Runtime 30 seconds
[  115.969141][ T1115] block nbd0: Possible stuck request ffff888022da8600: control (read@3072,1024B). Runtime 30 seconds
[  116.599266][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  117.070249][    C1] bridge0: port 3(veth0_to_bridge) entered blocking state
[  117.191128][ T8792] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.237309][ T8787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.346881][ T8801] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  117.541751][ T8808] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  117.598558][ T8828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.656085][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.660828][ T8834] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  117.671988][ T8834] batadv0: entered promiscuous mode
[  117.673813][ T8834] batadv0: entered allmulticast mode
[  117.676747][ T8834] bond0: (slave batadv0): Releasing backup interface
[  117.683734][ T8834] bridge0: port 5(batadv0) entered blocking state
[  117.685949][ T8834] bridge0: port 5(batadv0) entered disabled state
[  117.689735][ T8835] syzkaller1: entered promiscuous mode
[  117.696003][ T8835] syzkaller1: entered allmulticast mode
[  117.711456][ T8835] __nla_validate_parse: 18 callbacks suppressed
[  117.711467][ T8835] netlink: 164 bytes leftover after parsing attributes in process `syz.0.873'.
[  118.068054][ T8858] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.089842][ T5858] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  118.092921][ T5858] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  118.097631][ T8858] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.145098][ T8858] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.187461][ T8858] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.284756][ T5858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.306420][ T5858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.323358][ T5858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.339116][ T5858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.427776][ T8870] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073491447809)
[  118.618905][ T8877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.632401][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  118.635828][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  118.641146][ T8843] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  118.641675][ T8877] tipc: Resetting bearer <eth:syzkaller0>
[  118.645597][ T8843] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  118.651494][ T8843] CPU: 1 UID: 0 PID: 8843 Comm: syz.2.875 Not tainted syzkaller #0 PREEMPT(full) 
[  118.654861][ T8843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.658881][ T8843] RIP: 0010:rose_transmit_link+0x32/0x740
[  118.661041][ T8843] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 29 61 53 f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  118.667071][ T8843] RSP: 0018:ffffc90008fe7910 EFLAGS: 00010206
[  118.668953][ T8843] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88810650d640
[  118.671413][ T8843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811c4a6000
[  118.673875][ T8843] RBP: 0000000000000000 R08: ffff88810650d640 R09: 0000000000000008
[  118.676321][ T8843] R10: 000000000000000f R11: 0000000000000000 R12: ffff88811c4a6000
[  118.678738][ T8843] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  118.681251][ T8843] FS:  00007f73bd3f66c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  118.683979][ T8843] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.685995][ T8843] CR2: 0000200000002280 CR3: 0000000038f92000 CR4: 00000000000006f0
[  118.688616][ T8843] Call Trace:
[  118.689638][ T8843]  <TASK>
[  118.690558][ T8843]  ? skb_put+0x11b/0x210
[  118.691888][ T8843]  rose_write_internal+0x11dc/0x1ac0
[  118.693536][ T8843]  ? __pfx_rose_write_internal+0x10/0x10
[  118.695282][ T8843]  ? __timer_delete+0x5d/0x390
[  118.696774][ T8843]  rose_release+0x24e/0x520
[  118.698201][ T8843]  sock_close+0xc3/0x240
[  118.699509][ T8843]  ? __pfx_sock_close+0x10/0x10
[  118.701025][ T8843]  __fput+0x44c/0xa70
[  118.702271][ T8843]  task_work_run+0x1d4/0x260
[  118.703716][ T8843]  ? __pfx_task_work_run+0x10/0x10
[  118.705297][ T8843]  ? task_work_add+0x377/0x420
[  118.706778][ T8843]  ? __pfx_task_work_add+0x10/0x10
[  118.708367][ T8843]  get_signal+0x11ed/0x1340
[  118.709776][ T8843]  arch_do_signal_or_restart+0x9a/0x750
[  118.711496][ T8843]  ? __pfx___sys_connect+0x10/0x10
[  118.713104][ T8843]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  118.714969][ T8843]  ? exit_to_user_mode_loop+0x40/0x110
[  118.716621][ T8843]  exit_to_user_mode_loop+0x75/0x110
[  118.718341][ T8843]  do_syscall_64+0x2bd/0x3b0
[  118.719770][ T8843]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.721391][ T8843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.723260][ T8843]  ? exc_page_fault+0x9f/0xf0
[  118.724696][ T8843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.726532][ T8843] RIP: 0033:0x7f73bf18ebe9
[  118.727915][ T8843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.733628][ T8843] RSP: 002b:00007f73bd3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  118.736200][ T8843] RAX: 0000000000000000 RBX: 00007f73bf3b6090 RCX: 00007f73bf18ebe9
[  118.738543][ T8843] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000019
[  118.740939][ T8843] RBP: 00007f73bf211e19 R08: 0000000000000000 R09: 0000000000000000
[  118.743301][ T8843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.745739][ T8843] R13: 00007f73bf3b6128 R14: 00007f73bf3b6090 R15: 00007ffd6831f8e8
[  118.748196][ T8843]  </TASK>
[  118.749156][ T8843] Modules linked in:
[  118.750982][ T8843] ---[ end trace 0000000000000000 ]---
[  118.756478][ T8843] RIP: 0010:rose_transmit_link+0x32/0x740
[  118.759834][ T8843] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 29 61 53 f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  118.766156][ T8843] RSP: 0018:ffffc90008fe7910 EFLAGS: 00010206
[  118.768158][ T8843] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88810650d640
[  118.771113][ T8843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811c4a6000
[  118.774571][ T8843] RBP: 0000000000000000 R08: ffff88810650d640 R09: 0000000000000008
[  118.777944][ T8843] R10: 000000000000000f R11: 0000000000000000 R12: ffff88811c4a6000
[  118.781277][ T8843] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  118.784553][ T8876] tipc: Disabling bearer <eth:syzkaller0>
[  118.786760][ T8843] FS:  00007f73bd3f66c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  118.790461][ T8843] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.793186][ T8843] CR2: 00007febf37d1d58 CR3: 0000000038f92000 CR4: 00000000000006f0
[  118.796565][ T8843] Kernel panic - not syncing: Fatal exception
[  118.799555][ T8843] Kernel Offset: disabled
[  118.801225][ T8843] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:25:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=000055557fa3bb20 RCX=00007f6760d8d5bd RDX=0000000000000400
RSI=00005555819bd1b0 RDI=000000000000000e RBP=00007ffe8e7d4950 RSP=00007ffe8e7d4628
R8 =000000001f067401 R9 =000055557fa3f0c8 R10=3fffffffffffffff R11=0000000000000246
R12=000055557fa3bc38 R13=000055557fa3f0b0 R14=00007ffe8e7d46d0 R15=000055557fa3d7e0
RIP=ffffffff8100008f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557fa27500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555819bd000 CR3=000000010eef1000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000015 000000000003bf12
XMM02=0302100003b00301 8810002c90031404 XMM03=080003e003001000 03d00300100003c0
XMM04=0000000000000000 0000000000000000 XMM05=000055557fa42b5c 000055557fa424d0
XMM06=0000000000000000 0000000000000000 XMM07=d200080003e00300 100003d003001000
XMM08=03c00302100003b0 03018810002c9003 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008fe7150
R8 =ffff8881064e0237 R9 =1ffff11020c9c046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98fe R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f73bd3f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002280 CR3=0000000038f92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=82e99e1a77ba5cc7 143f0d37e52aea41
XMM02=59c20981e6dadc90 8a4c942b636dacef XMM03=87ae605dbcda114d 2fb1a87319babff0
XMM04=1ad65fbbafa3bde1 b5012a6b8dc7b6f6 XMM05=3e6ea4a42afd4881 febbdd10f643d632
XMM06=ed71447962f05c52 064d954414616b02 XMM07=67221ad65fbbafa3 bde1b5012a6b8dc7
XMM08=b6f687ae605dbcda 114d2fb1a87319ba XMM09=0000000000000000 00007f25f9412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
