last executing test programs:

1.141119536s ago: executing program 2 (id=943):
r0 = socket$kcm(0x11, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x8, 0xb}, {0x4, 0x5}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r6 = socket(0x1, 0x3, 0x0)
bind$unix(r6, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) (async)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x18, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x0)

1.128062431s ago: executing program 0 (id=944):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0xfffffff9}}}, &(0x7f0000000100)=0x84)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000)

1.018083697s ago: executing program 0 (id=946):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0xa, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6b}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004080}, 0x24044000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r2, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0000000000000003df256b00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000320000000a001a0008021100000100000a000600ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a0006000802110000010000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc040)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, 0x0, 0x7, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000057982f5c99f9c1651548010001000000000000000000000000000002000a20000000000a030000000000000000000900010073797a300000000064000000090a010400000000000000000100230008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c0008000100000000", @ANYRES64=r0], 0xac}}, 0x4000000)

1.017294274s ago: executing program 0 (id=948):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4008af13, &(0x7f0000000040))

1.016832279s ago: executing program 2 (id=949):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES8], 0x14}}, 0x4048884)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={<r4=>r1, 0x4, 0x7, 0xffffffffffffffff})
r5 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f00000002c0)={0xa, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x6b}, 0xc000040)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'bond_slave_1\x00', 0x800})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008048509920deaa7a", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r3, @ANYBLOB="050011000900000008001f000d000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
bind$bt_l2cap(r7, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000140)=0x3, 0x12)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x8005, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1004)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x2004}, 0x18)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010)
close(r14)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

1.01392232s ago: executing program 0 (id=950):
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x80, {0x10, 0x3, 0xfffffffffffffffe, 0x7, 0x6}})
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000300)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r7=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRES8, @ANYRES32=r7, @ANYRES32=r2], 0x2c}}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=@deltaction={0x74, 0x31, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}]}, 0x74}, 0x1, 0xf0ffffffffffff}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
readv(r10, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000040)={0x1000, 0x7fff, 0x3, 0x2}, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r13=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100001040000000000f9067c0dc6a0dc1edfbf2c9700000000000000", @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="0500070001000000"], 0x48}}, 0x0)

907.259594ms ago: executing program 0 (id=952):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x80000, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000400700000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x48, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e657b8220cc393c9de9030c3c7175ae0132383bf66bd1ea5bd07a8092f5c1c356ef81ebc8a3ed112ac4148ace258f78bc2340c45834bc28c93523f00c13f7bda920d040647a60c2f548c6d1556573b00"/90, 0x5a}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c", 0x14}, {&(0x7f0000000380)}], 0x3}}], 0x1, 0xc0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'geneve1\x00', @remote})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffc56, 0x0}, 0x2)
close(0xffffffffffffffff)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff36bf}], 0x1, 0x0, 0x0)
recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40002000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd0000120000000000000064d6892b0f9a11"], 0xfd0)
close(0x3)
sendto$inet(r1, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x1}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x3, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

778.972161ms ago: executing program 2 (id=955):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000)

777.820246ms ago: executing program 2 (id=957):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f0000000180))
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000000200)={0x4, 0x80, 0x6, {0x77359400}, {0x77359400}, {0x1, 0x1}, 0x1, @can={{0x3}, 0x5, 0x3, 0x0, 0x0, "96da0fc0a8b2ac68"}}, 0x48}, 0x1, 0x0, 0x0, 0x48041}, 0x4a041)
socket$netlink(0x10, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)
unshare(0x400)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4ff0000000071101e004ecd75d355c0f015b8020000000000000500000085100010000000008c86010001003a22fda5028c00"/62], &(0x7f0000000480)='GPL\x00'}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4)

668.131248ms ago: executing program 2 (id=958):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
unshare(0x22020400)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x100000)

609.71426ms ago: executing program 2 (id=959):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x5, 0x5, 0x6dc})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x5, 0xe}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x0, 0xe}, {0x1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x849f, @multicast2}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @local}, 0x40, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_virt_wifi\x00', 0xfffffffffffffffa, 0x4, 0xf})

366.099002ms ago: executing program 1 (id=965):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xc, r7}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000240)}, 0x20)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r5, 0xffffffffffffffff, 0x8, 0x5}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xfffffffd, 0x1, 0xfe9c, 0xc454, 0xffffffffffffffff, 0x5fc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
pipe(&(0x7f0000000540)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'pim6reg0\x00'})
r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x10, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xb7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x39, &(0x7f0000000400)=""/57, 0x41000, 0x10, '\x00', r10, @fallback=0x38, r11, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x6, 0xfff}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000000740)=[r12, r13, r14, r6, r16, r17], &(0x7f0000000780)=[{0x0, 0x5, 0x2, 0x2}, {0x1, 0x1, 0x3, 0x9}, {0x1, 0x5, 0xe}, {0x3, 0x1, 0xa, 0x4}, {0x2, 0x2, 0xf, 0xa}, {0x3, 0x5, 0xc, 0x2}, {0x5, 0x2, 0xb}, {0x1, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x650e817e554fc808}], 0x10, 0xe}, 0x94)
connect$rxrpc(r15, &(0x7f0000000940)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)

209.935849ms ago: executing program 1 (id=966):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4008af20, &(0x7f0000000040))

187.630883ms ago: executing program 1 (id=967):
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x115, 0x70bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000006d40), 0x2, 0x0)
poll(&(0x7f00000000c0)=[{r2, 0x4001}, {r2, 0xd054}, {0xffffffffffffffff, 0x8100}, {0xffffffffffffffff, 0x20}, {r2, 0x560}, {r2, 0x204}, {r2, 0x2080}, {r2, 0x42}, {r2, 0x234}], 0x9, 0x3)

117.619597ms ago: executing program 1 (id=968):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x7}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x41}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071129c000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=0x4)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x699, 0xcf7, 0x1, 0x400, 0xfffffffffffff801, 0x80060100, r2})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0xbdce6000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={<r4=>r1, 0x80000000, 0x10000, 0x7ff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)=r1}, 0x20)
r6 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000bd7000ffdbdf250104000006000400001000f0c6a7139a1e30138369c5a01d000000000006000300000000000600030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8801)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7000000001800000008", 0x18)
r11 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_buf(r11, 0x1, 0x24, &(0x7f0000000180)=""/46, &(0x7f00000001c0)=0x2e)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = gettid()
ioctl$sock_FIOSETOWN(r12, 0x8901, &(0x7f0000000000)=r13)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={r13, r9, 0x0, 0x8, &(0x7f0000000800)='.%:-%\\+\x00'}, 0x30)
setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x22, &(0x7f0000000400)=ANY=[@ANYBLOB="950000000000000018170000", @ANYRES32=r3, @ANYBLOB="000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000a00200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000e10a04ab77ec00850000008200", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000700)='GPL\x00', 0x23, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, 0x25, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x1, 0xe, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)=[{0x5, 0x5, 0xe, 0x8}, {0x4, 0x2, 0x4, 0x4}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

39.220766ms ago: executing program 1 (id=969):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000)="8ec6b1ee58ca706c16500800000055897a498e6841bedf1145bb9b3a049dc5f35a05b9fc904a17802af0a89c28db4d911720f368d3ed2d2ed06396b7d4db9619ee1eac8fedc33624e74db8132c9e088c25bcd7b5604686bd73dfbb3ae1ca5607cb98f117eee5fd81b16150653f4b95d75a76", &(0x7f0000000740)=""/4096}, 0x20)

38.810858ms ago: executing program 1 (id=970):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000400))
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r5)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x80, 0x8, 0xfffffff9, 0x0, {{0x9, 0x4, 0x0, 0x3d, 0x24, 0x64, 0x0, 0x88, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, {[@end, @generic={0x7, 0xe, "bd90f3073505349cb632327b"}, @noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r8, &(0x7f0000000740)='|', 0x1, 0x4000, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r8, 0x1)
setsockopt(r8, 0x484, 0x9, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="06000000", @ANYRES32=r9, @ANYBLOB="14000200fe80000000000000000000f3ffffffa9080009003f0c0000140001", @ANYRESOCT=r5, @ANYRES8=r7], 0x48}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})

0s ago: executing program 0 (id=971):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000006d40), 0x2, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x4001}, {r0, 0xd054}, {0xffffffffffffffff, 0x8100}, {0xffffffffffffffff, 0x20, 0x900}, {r0, 0x560}, {r0, 0x204}, {r0, 0x2080}, {r0, 0x42}, {r0, 0x234}], 0x9, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11144' (ED25519) to the list of known hosts.
syzkaller login: [   57.138302][ T5769] cgroup: Unknown subsys name 'net'
[   57.264699][ T5769] cgroup: Unknown subsys name 'cpuset'
[   57.271253][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.590658][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.867749][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.871497][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.874403][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.875038][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.879654][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.880289][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.887290][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.887292][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.901327][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.904887][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.912746][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.921704][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.924965][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.928715][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.939661][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.253340][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   65.334973][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   65.381782][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.420581][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.424153][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.427176][ T5843] bridge_slave_0: entered allmulticast mode
[   65.430943][ T5843] bridge_slave_0: entered promiscuous mode
[   65.436282][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.439178][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.442624][ T5843] bridge_slave_1: entered allmulticast mode
[   65.446402][ T5843] bridge_slave_1: entered promiscuous mode
[   65.501292][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.525867][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.575626][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.578602][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.581793][ T5844] bridge_slave_0: entered allmulticast mode
[   65.585646][ T5844] bridge_slave_0: entered promiscuous mode
[   65.598489][ T5843] team0: Port device team_slave_0 added
[   65.601379][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.604256][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.607278][ T5844] bridge_slave_1: entered allmulticast mode
[   65.611869][ T5844] bridge_slave_1: entered promiscuous mode
[   65.642757][ T5843] team0: Port device team_slave_1 added
[   65.683008][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.686870][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.689157][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.697657][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.701861][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.704114][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.706355][ T5853] bridge_slave_0: entered allmulticast mode
[   65.709641][ T5853] bridge_slave_0: entered promiscuous mode
[   65.714813][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.718417][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.721809][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.730755][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.734307][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.736746][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.739077][ T5853] bridge_slave_1: entered allmulticast mode
[   65.741940][ T5853] bridge_slave_1: entered promiscuous mode
[   65.775918][ T5844] team0: Port device team_slave_0 added
[   65.788404][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.793049][ T5844] team0: Port device team_slave_1 added
[   65.796808][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.874185][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.876956][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.887246][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.895830][ T5843] hsr_slave_0: entered promiscuous mode
[   65.898192][ T5843] hsr_slave_1: entered promiscuous mode
[   65.902456][ T5853] team0: Port device team_slave_0 added
[   65.906831][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.909572][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.920982][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.932577][ T5853] team0: Port device team_slave_1 added
[   66.002198][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.004634][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.014266][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.038718][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.041674][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.051512][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.095844][ T5844] hsr_slave_0: entered promiscuous mode
[   66.098253][ T5844] hsr_slave_1: entered promiscuous mode
[   66.101140][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   66.103449][ T5844] Cannot create hsr debugfs directory
[   66.149658][ T5853] hsr_slave_0: entered promiscuous mode
[   66.153506][ T5853] hsr_slave_1: entered promiscuous mode
[   66.156381][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   66.158669][ T5853] Cannot create hsr debugfs directory
[   66.378536][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.395660][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.406744][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.419282][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.481133][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.503638][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.512001][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.544760][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.554908][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.573069][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.585101][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.593608][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.705750][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.727134][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   66.742527][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.745526][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.763782][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.768812][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.771797][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.794912][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.820739][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   66.846289][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.852902][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.855769][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.873046][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.875873][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.897782][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.900839][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.907383][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.910257][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.001633][ T5851] Bluetooth: hci0: command tx timeout
[   67.001671][ T5847] Bluetooth: hci2: command tx timeout
[   67.003915][ T5851] Bluetooth: hci1: command tx timeout
[   67.036328][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.102712][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.155324][ T5843] veth0_vlan: entered promiscuous mode
[   67.177176][ T5843] veth1_vlan: entered promiscuous mode
[   67.206462][ T5843] veth0_macvtap: entered promiscuous mode
[   67.220877][ T5843] veth1_macvtap: entered promiscuous mode
[   67.249698][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.260889][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.271134][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.283354][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.301507][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.305955][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.327866][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.332313][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.401567][ T5853] veth0_vlan: entered promiscuous mode
[   67.444690][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.444806][ T5844] veth0_vlan: entered promiscuous mode
[   67.447909][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.453088][ T5853] veth1_vlan: entered promiscuous mode
[   67.505051][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.508170][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.514772][ T5844] veth1_vlan: entered promiscuous mode
[   67.537142][ T5853] veth0_macvtap: entered promiscuous mode
[   67.557311][ T5853] veth1_macvtap: entered promiscuous mode
[   67.591381][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.595314][ T5844] veth0_macvtap: entered promiscuous mode
[   67.615135][ T5844] veth1_macvtap: entered promiscuous mode
[   67.628192][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.650622][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.659458][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.681516][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.685084][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.688914][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.694284][ T5911] tipc: Started in network mode
[   67.696364][ T5911] tipc: Node identity 4, cluster identity 4711
[   67.698824][ T5911] tipc: Node number set to 4
[   67.705371][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.708349][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.726989][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.731412][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.735279][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.746431][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.851745][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.857598][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.921433][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.924613][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.934215][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.938681][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.978860][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.983253][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.094040][ T5883] IPVS: starting estimator thread 0...
[   68.193467][ T5918] IPVS: using max 62 ests per chain, 148800 per kthread
[   68.224752][ T5927] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET)
[   69.084866][ T5851] Bluetooth: hci2: command tx timeout
[   69.084937][ T5847] Bluetooth: hci1: command tx timeout
[   69.089082][ T5233] Bluetooth: hci0: command tx timeout
[   69.548792][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'.
[   69.607396][ T5944] Zero length message leads to an empty skb
[   70.038830][ T5967] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16'.
[   70.104549][ T5971] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   70.806279][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.120894][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'.
[   71.125263][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'.
[   71.162698][ T5847] Bluetooth: hci1: command tx timeout
[   71.164775][ T5847] Bluetooth: hci0: command tx timeout
[   71.166673][ T5233] Bluetooth: hci2: command tx timeout
[   71.719015][ T6037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.44'.
[   71.946607][ T6055] netlink: 'syz.2.52': attribute type 1 has an invalid length.
[   72.372019][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'.
[   72.508275][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.882622][ T6097] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[   73.244127][ T5847] Bluetooth: hci0: command tx timeout
[   73.246051][ T5847] Bluetooth: hci2: command tx timeout
[   73.247906][ T5847] Bluetooth: hci1: command tx timeout
[   73.334469][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[   73.396417][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   73.538893][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   73.855051][ T6140] syzkaller1: entered promiscuous mode
[   73.856922][ T6140] syzkaller1: entered allmulticast mode
[   73.865889][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'.
[   73.905302][ T6112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.949721][ T5850] block nbd64: NBD_DISCONNECT
[   74.433575][ T6180] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   74.991768][ T6232] netlink: 'syz.2.128': attribute type 10 has an invalid length.
[   75.145872][ T6252] warning: `syz.2.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.152159][ T6253] __nla_validate_parse: 2 callbacks suppressed
[   75.152180][ T6253] netlink: 68 bytes leftover after parsing attributes in process `syz.0.137'.
[   75.232758][ T6263] netlink: 676 bytes leftover after parsing attributes in process `syz.0.142'.
[   75.236345][ T6263] netlink: 676 bytes leftover after parsing attributes in process `syz.0.142'.
[   75.288385][ T6267] netlink: 'syz.0.144': attribute type 12 has an invalid length.
[   75.687946][ T6278] netlink: 92 bytes leftover after parsing attributes in process `syz.0.147'.
[   75.740999][ T6280] Bluetooth: MGMT ver 1.23
[   75.799247][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'.
[   75.804633][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.150'.
[   76.326481][ T6314] netlink: 100 bytes leftover after parsing attributes in process `syz.1.165'.
[   76.330988][ T6314] netlink: 100 bytes leftover after parsing attributes in process `syz.1.165'.
[   76.367361][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   76.369771][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   76.803234][ T6325] tipc: Started in network mode
[   76.805317][ T6325] tipc: Node identity 4, cluster identity 4711
[   76.808079][ T6325] tipc: Node number set to 4
[   77.244652][ T6349] syz_tun: entered allmulticast mode
[   77.256604][ T6349] dvmrp8: entered allmulticast mode
[   77.352672][ T6354] netlink: 'syz.0.176': attribute type 23 has an invalid length.
[   77.496062][ T6348] syz_tun: left allmulticast mode
[   77.499544][ T6348] dvmrp8: left allmulticast mode
[   77.591709][ T6362] team0: Port device team_slave_0 removed
[   79.281262][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'.
[   79.294176][ T6423] geneve2: entered promiscuous mode
[   79.296358][ T6423] geneve2: entered allmulticast mode
[   79.302237][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36976 - 0
[   79.305608][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36976 - 0
[   79.320320][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36976 - 0
[   79.328055][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36976 - 0
[   79.381374][ T6427] Driver unsupported XDP return value 0 on prog  (id 39) dev N/A, expect packet loss!
[   79.448213][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'.
[   80.102146][ T6473] trusted_key: syz.2.217 sent an empty control message without MSG_MORE.
[   80.697751][ T6537] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   81.039066][ T6567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.087242][ T6567] syzkaller0: entered promiscuous mode
[   81.089590][ T6567] syzkaller0: entered allmulticast mode
[   81.092963][ T6567] tipc: Resetting bearer <eth:syzkaller0>
[   81.116720][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[   82.399639][ T6565] tipc: Disabling bearer <eth:syzkaller0>
[   82.537348][ T6604] syzkaller1: entered promiscuous mode
[   82.539167][ T6604] syzkaller1: entered allmulticast mode
[   83.768178][ T6665] netlink: 'syz.0.289': attribute type 21 has an invalid length.
[   83.771340][ T6665] netlink: 'syz.0.289': attribute type 1 has an invalid length.
[   83.777954][ T6665] __nla_validate_parse: 2 callbacks suppressed
[   83.777966][ T6665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.289'.
[   83.842271][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[   83.846731][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[   83.851109][ T6672] netlink: 58 bytes leftover after parsing attributes in process `syz.1.292'.
[   83.898605][ T6677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.913908][ T6677] syzkaller0: entered promiscuous mode
[   83.916087][ T6677] syzkaller0: entered allmulticast mode
[   83.946671][ T6677] tipc: Resetting bearer <eth:syzkaller0>
[   83.954317][ T6674] tipc: Resetting bearer <eth:syzkaller0>
[   83.981054][ T6674] tipc: Disabling bearer <eth:syzkaller0>
[   84.178290][ T6700] tipc: Started in network mode
[   84.180615][ T6700] tipc: Node identity 220cc3ecfa69, cluster identity 4711
[   84.183651][ T6700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.187942][ T6700] syzkaller0: entered promiscuous mode
[   84.191821][ T6700] syzkaller0: entered allmulticast mode
[   85.197999][ T6726] netlink: 'syz.0.316': attribute type 10 has an invalid length.
[   85.210173][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'.
[   85.225129][ T6726] team0: Port device geneve0 added
[   85.301235][  T793] tipc: Node number set to 3630547948
[   85.401973][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[   85.422491][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'.
[   86.002092][ T6755] netlink: 288 bytes leftover after parsing attributes in process `syz.2.325'.
[   86.437844][ T6768] netlink: 508 bytes leftover after parsing attributes in process `syz.2.330'.
[   86.579535][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[   86.603095][   T49] cfg80211: failed to load regulatory.db
[   87.752405][ T6805] delete_channel: no stack
[   87.913159][ T6811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.445769][ T6847] IPv6: NLM_F_CREATE should be specified when creating new route
[   88.593904][ T6872] batadv_slave_1: entered promiscuous mode
[   88.627397][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.706657][ T6886] nbd: socks must be embedded in a SOCK_ITEM attr
[   88.795109][ T6872] batadv_slave_1 (unregistering): left promiscuous mode
[   88.822967][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.018929][ T6905] __nla_validate_parse: 6 callbacks suppressed
[   89.018941][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[   89.027934][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'.
[   89.031340][ T6905] netlink: 'syz.2.348': attribute type 7 has an invalid length.
[   89.527532][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'.
[   89.533756][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'.
[   89.537333][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'.
[   89.595091][ T6937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'.
[   89.657290][ T6941] netlink: 64 bytes leftover after parsing attributes in process `syz.0.360'.
[   89.660450][ T6941] block nbd0: not configured, cannot reconfigure
[   89.664024][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.360'.
[   89.721659][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.361'.
[   89.725267][ T6946] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   89.768577][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'.
[   89.775223][ T6954] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[   91.286045][ T7022] sit1: entered promiscuous mode
[   91.303600][ T7020] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.322757][ T7020] tipc: Resetting bearer <eth:syzkaller0>
[   91.404676][ T7025] syzkaller1: entered promiscuous mode
[   91.407268][ T7025] syzkaller1: entered allmulticast mode
[   91.416497][ T7025] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[   91.440970][ T7025] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.532713][ T7033] vlan2: entered promiscuous mode
[   91.534352][ T7033] bond0: entered promiscuous mode
[   91.536124][ T7033] bond_slave_0: entered promiscuous mode
[   91.538115][ T7033] bond_slave_1: entered promiscuous mode
[   91.747211][ T7041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.769693][ T7041] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   92.372751][ T7083] nbd: couldn't find a device at index 65546
[   92.387981][ T7083] netlink: 'syz.0.396': attribute type 1 has an invalid length.
[   92.700140][ T7101] dvmrp8: entered allmulticast mode
[   92.718386][ T7102] dvmrp8: left allmulticast mode
[   93.305881][ T7121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.547992][ T7130] vlan0: entered promiscuous mode
[   93.701812][ T7139] tipc: Enabled bearer <eth:veth1_to_bridge>, priority 10
[   93.731465][ T7143] tipc: New replicast peer: 255.255.255.255
[   93.737871][ T7143] tipc: Enabled bearer <udp:syz2>, priority 10
[   93.775246][ T7148] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   93.945579][ T7158] syz_tun: entered allmulticast mode
[   93.948824][ T7158] unsupported nlmsg_type 40
[   93.952286][ T7158] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004
[   93.958376][ T7157] syz_tun: left allmulticast mode
[   94.076454][ T7168] __nla_validate_parse: 22 callbacks suppressed
[   94.076467][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'.
[   94.165166][ T7175] netlink: 'syz.1.423': attribute type 6 has an invalid length.
[   94.190379][ T7175] netlink: 'syz.1.423': attribute type 12 has an invalid length.
[   94.193388][ T7175] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.423'.
[   94.343640][ T7189] netlink: 72 bytes leftover after parsing attributes in process `syz.2.427'.
[   94.350988][ T7189] netlink: 72 bytes leftover after parsing attributes in process `syz.2.427'.
[   94.444197][ T7193] netlink: 128 bytes leftover after parsing attributes in process `syz.1.426'.
[   94.447350][ T7193] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   94.533206][    T9] IPVS: starting estimator thread 0...
[   94.585582][ T7209] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[   94.602842][ T7209] IPVS: lc: FWM 3 0x00000003 - no destination available
[   94.610832][ T7209] netlink: 244 bytes leftover after parsing attributes in process `syz.2.432'.
[   94.630199][ T7203] IPVS: using max 62 ests per chain, 148800 per kthread
[   94.745357][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'.
[   94.791696][ T7216] netlink: 248 bytes leftover after parsing attributes in process `syz.2.434'.
[   94.986175][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[   95.001306][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[   95.006210][ T7234] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   95.025721][ T7232] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.447845][ T7265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.457895][ T7265] syzkaller0: entered promiscuous mode
[   95.460975][ T7265] syzkaller0: entered allmulticast mode
[   95.474836][ T7265] netlink: 'syz.1.445': attribute type 3 has an invalid length.
[   95.543249][ T7265] tipc: Resetting bearer <eth:syzkaller0>
[   95.573772][ T7262] tipc: Resetting bearer <eth:syzkaller0>
[   95.599126][ T7262] tipc: Disabling bearer <eth:syzkaller0>
[   95.767280][ T7273] netlink: 'syz.0.446': attribute type 11 has an invalid length.
[   96.180725][ T7286] tipc: Enabled bearer <eth:veth1_to_bridge>, priority 10
[   96.198184][ T7286] netlink: 'syz.0.449': attribute type 64 has an invalid length.
[   96.235525][ T7286] netlink: 'syz.0.449': attribute type 5 has an invalid length.
[   96.271332][ T7286] openvswitch: netlink: Duplicate or invalid key (type 0).
[   96.274232][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.527886][ T7306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.607159][ T7319] syzkaller0: MTU too low for tipc bearer
[   96.609431][ T7319] tipc: Disabling bearer <eth:syzkaller0>
[   96.673972][ T7322] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[   96.687166][ T5311] IPVS: starting estimator thread 0...
[   96.749634][ T7329] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[   96.754504][ T7329] IPVS: lc: FWM 3 0x00000003 - no destination available
[   96.772591][ T7325] IPVS: using max 40 ests per chain, 96000 per kthread
[   96.917397][ T7340] netlink: 'syz.1.464': attribute type 3 has an invalid length.
[   96.960957][ T7340] netlink: 'syz.1.464': attribute type 17 has an invalid length.
[   97.101213][ T7349] syzkaller1: entered promiscuous mode
[   97.103391][ T7349] syzkaller1: entered allmulticast mode
[   97.116402][ T7347] netlink: 'syz.2.466': attribute type 2 has an invalid length.
[   97.309340][ T7372] netlink: 'syz.2.473': attribute type 46 has an invalid length.
[   97.722017][ T7382] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.738519][ T7382] bond2: (slave geneve2): making interface the new active one
[   97.743929][ T7382] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   97.755570][ T7382] bond2: entered promiscuous mode
[   97.757860][ T7382] geneve2: entered promiscuous mode
[   98.358861][ T7433] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[   98.361838][ T7433] tipc: Bearer <udp:syz0>: trying with adjusted priority
[   98.364512][ T7433] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.373666][ T7433] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[   98.377225][ T7433] tipc: Bearer <udp:syz0>: trying with adjusted priority
[   98.387195][ T7433] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.536503][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.544528][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.552969][ T7440] bond0 (unregistering): Released all slaves
[   99.054738][ T7458] syzkaller1: entered promiscuous mode
[   99.056954][ T7458] syzkaller1: entered allmulticast mode
[   99.358163][ T7466] validate_nla: 1 callbacks suppressed
[   99.358197][ T7466] netlink: 'syz.2.500': attribute type 3 has an invalid length.
[   99.364661][ T7466] __nla_validate_parse: 16 callbacks suppressed
[   99.364672][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   99.371516][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'.
[   99.965892][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'.
[   99.969690][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'.
[  100.259089][ T7505] IPv6: sit2: Disabled Multicast RS
[  100.555802][ T7525] netlink: 'syz.1.519': attribute type 4 has an invalid length.
[  100.559365][ T7525] netlink: 'syz.1.519': attribute type 7 has an invalid length.
[  100.646344][ T7531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'.
[  100.736616][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'.
[  100.809746][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.524'.
[  100.818043][ T7540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.524'.
[  100.952955][ T7545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.956951][ T7545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  101.018182][ T7545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.022250][ T7545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  101.082013][ T7545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.085176][ T7545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  101.171284][ T7545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.175392][ T7545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  101.306879][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.312649][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 36976 - 0
[  101.345509][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.348750][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 36976 - 0
[  101.402936][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.406037][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 36976 - 0
[  101.435061][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.442949][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 36976 - 0
[  101.625927][ T7581] tun0: tun_chr_ioctl cmd 2147767521
[  101.931953][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'.
[  102.019325][ T7607] netlink: 244 bytes leftover after parsing attributes in process `syz.0.547'.
[  102.329236][ T7633] netlink: 'syz.2.552': attribute type 39 has an invalid length.
[  102.474615][ T7642] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  102.558036][ T7653] netlink: 'syz.0.558': attribute type 3 has an invalid length.
[  102.605650][ T7657] lo speed is unknown, defaulting to 1000
[  102.609675][ T7657] lo speed is unknown, defaulting to 1000
[  102.614166][ T7657] lo speed is unknown, defaulting to 1000
[  102.674195][ T7658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.741956][ T7657] infiniband syz0: set active
[  102.745241][   T24] lo speed is unknown, defaulting to 1000
[  102.747652][   T24] syz0: Port: 1 Link ACTIVE
[  102.749686][ T7657] infiniband syz0: added lo
[  102.749696][ T5876] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  102.806749][ T7657] RDS/IB: syz0: added
[  102.811949][ T7657] lo speed is unknown, defaulting to 1000
[  102.886710][ T7662] macvlan2: entered promiscuous mode
[  102.888891][ T7662] macvlan2: entered allmulticast mode
[  102.893738][ T7662] bond0: (slave macvlan2): Opening slave failed
[  103.019513][ T7657] lo speed is unknown, defaulting to 1000
[  103.159223][ T7657] lo speed is unknown, defaulting to 1000
[  103.535284][ T7694] netlink: 'syz.1.568': attribute type 6 has an invalid length.
[  103.681712][ T7706] netlink: 'syz.1.573': attribute type 4 has an invalid length.
[  103.819188][ T7722] lo speed is unknown, defaulting to 1000
[  104.163047][ T7744] xt_l2tp: wrong L2TP version: 1
[  104.617141][ T7757] __nla_validate_parse: 6 callbacks suppressed
[  104.617159][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[  104.708690][ T7760] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  104.721532][ T7760] IPVS: lc: FWM 3 0x00000003 - no destination available
[  104.731775][ T7760] netlink: 244 bytes leftover after parsing attributes in process `syz.1.589'.
[  104.885701][ T7775] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  105.201722][ T7797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.601'.
[  105.293344][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'.
[  105.297828][ T7804] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  105.300502][ T7804] netlink: 'syz.0.606': attribute type 3 has an invalid length.
[  105.303026][ T7804] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  105.305396][ T7804] netlink: 204 bytes leftover after parsing attributes in process `syz.0.606'.
[  105.308228][ T7804] NCSI netlink: No device for ifindex 0
[  105.352207][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'.
[  105.355861][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[  105.468187][ T7822] tap0: tun_chr_ioctl cmd 1074812118
[  105.514788][ T7826] syzkaller1: entered promiscuous mode
[  105.516624][ T7826] syzkaller1: entered allmulticast mode
[  105.730386][ T7836] vlan2: entered allmulticast mode
[  105.861499][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'.
[  106.319640][ T7845] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  106.324188][ T7845] IPVS: lc: FWM 3 0x00000003 - no destination available
[  106.326833][ T7845] netlink: 244 bytes leftover after parsing attributes in process `syz.1.619'.
[  106.348284][ T7853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.622'.
[  106.777877][ T7881] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  107.033469][ T7888] pim6reg1: entered promiscuous mode
[  107.035847][ T7888] pim6reg1: entered allmulticast mode
[  107.679004][ T7910] syz_tun: entered allmulticast mode
[  107.704056][ T7910] dvmrp8: entered allmulticast mode
[  107.773959][ T7910] lo speed is unknown, defaulting to 1000
[  108.025337][ T7915] syz_tun: left allmulticast mode
[  108.027153][ T7915] dvmrp8: left allmulticast mode
[  108.474309][ T5844] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  108.478641][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  108.478658][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.478666][ T5844] Call Trace:
[  108.478672][ T5844]  <TASK>
[  108.478679][ T5844]  dump_stack_lvl+0x189/0x250
[  108.478703][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.478717][ T5844]  ? __pfx__printk+0x10/0x10
[  108.478743][ T5844]  dump_header+0xd3/0x480
[  108.478761][ T5844]  oom_kill_process+0x387/0x920
[  108.478783][ T5844]  out_of_memory+0xf09/0x12a0
[  108.478839][ T5844]  ? __pfx_out_of_memory+0x10/0x10
[  108.478863][ T5844]  mem_cgroup_out_of_memory+0x145/0x240
[  108.478875][ T5844]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  108.478902][ T5844]  ? _raw_spin_unlock+0x28/0x50
[  108.478914][ T5844]  ? memcg1_oom_prepare+0x37f/0x450
[  108.478929][ T5844]  try_charge_memcg+0xdff/0x1290
[  108.478956][ T5844]  ? __pfx_try_charge_memcg+0x10/0x10
[  108.478974][ T5844]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  108.478992][ T5844]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  108.479007][ T5844]  charge_memcg+0x9f/0x180
[  108.479023][ T5844]  __mem_cgroup_charge+0x25/0x80
[  108.479039][ T5844]  filemap_add_folio+0x49/0x270
[  108.479061][ T5844]  __filemap_get_folio+0x4f6/0xaf0
[  108.479086][ T5844]  filemap_fault+0x89d/0x1200
[  108.479105][ T5844]  ? __pfx_filemap_fault+0x10/0x10
[  108.479121][ T5844]  ? __pfx_filemap_map_pages+0x10/0x10
[  108.479133][ T5844]  ? __handle_mm_fault+0x27b7/0x5440
[  108.479155][ T5844]  __do_fault+0x138/0x390
[  108.479177][ T5844]  __handle_mm_fault+0x3611/0x5440
[  108.479192][ T5844]  ? __lock_acquire+0xab9/0xd20
[  108.479222][ T5844]  ? __pfx___handle_mm_fault+0x10/0x10
[  108.479249][ T5844]  ? lock_vma_under_rcu+0xdf/0x3d0
[  108.479267][ T5844]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  108.479291][ T5844]  handle_mm_fault+0x40a/0x8e0
[  108.479316][ T5844]  do_user_addr_fault+0xa81/0x1390
[  108.479342][ T5844]  ? rcu_is_watching+0x15/0xb0
[  108.479355][ T5844]  ? trace_page_fault_user+0x84/0x1e0
[  108.479390][ T5844]  exc_page_fault+0x76/0xf0
[  108.479403][ T5844]  asm_exc_page_fault+0x26/0x30
[  108.479413][ T5844] RIP: 0033:0x7f030a265c44
[  108.479425][ T5844] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 58 fb e9 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 69 fa e9 00 48 01 d1
[  108.479433][ T5844] RSP: 002b:00007fff5cb9b790 EFLAGS: 00010202
[  108.479444][ T5844] RAX: 0000001b31c24000 RBX: 0000000000000229 RCX: 000000000001a5e0
[  108.479450][ T5844] RDX: 00000000047eac76 RSI: 00007fff5cb9b820 RDI: 0000000000000001
[  108.479456][ T5844] RBP: 00007fff5cb9b7cc R08: 00000000112578c4 R09: 7fffffffffffffff
[  108.479463][ T5844] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388
[  108.479469][ T5844] R13: 00000000000927c0 R14: 000000000001a442 R15: 00007fff5cb9b820
[  108.479485][ T5844]  </TASK>
[  108.479490][ T5844] memory: usage 304860kB, limit 307200kB, failcnt 395
[  108.600239][ T5844] memory+swap: usage 297000kB, limit 9007199254740988kB, failcnt 0
[  108.603021][ T5844] kmem: usage 296616kB, limit 9007199254740988kB, failcnt 0
[  108.610027][ T5844] Memory cgroup stats for /syz0:
[  108.610270][ T5844] cache 0
[  108.613033][ T5844] rss 0
[  108.614136][ T5844] rss_huge 0
[  108.615501][ T5844] shmem 0
[  108.616743][ T5844] mapped_file 0
[  108.618130][ T5844] dirty 0
[  108.619274][ T5844] writeback 0
[  108.625259][ T5844] workingset_refault_anon 10
[  108.627760][ T5844] workingset_refault_file 0
[  108.630143][ T5844] swap 204800
[  108.631357][ T5844] swapcached 28672
[  108.632548][ T5844] pgpgin 26099
[  108.633627][ T5844] pgpgout 26092
[  108.634760][ T5844] pgfault 48300
[  108.635840][ T5844] pgmajfault 9
[  108.636934][ T5844] inactive_anon 0
[  108.638210][ T5844] active_anon 28672
[  108.639398][ T5844] inactive_file 0
[  108.640944][ T5844] active_file 0
[  108.642131][ T5844] unevictable 0
[  108.643224][ T5844] hierarchical_memory_limit 314572800
[  108.644871][ T5844] hierarchical_memsw_limit 9223372036854771712
[  108.697844][ T5844] total_cache 0
[  108.699414][ T5844] total_rss 0
[  108.721173][ T5844] total_rss_huge 0
[  108.723011][ T5844] total_shmem 0
[  108.724456][ T5844] total_mapped_file 0
[  108.726068][ T5844] total_dirty 0
[  108.727478][ T5844] total_writeback 0
[  108.740039][ T5844] total_workingset_refault_anon 10
[  108.741922][ T5844] total_workingset_refault_file 0
[  108.743895][ T5844] total_swap 204800
[  108.745369][ T5844] total_swapcached 28672
[  108.747039][ T5844] total_pgpgin 26099
[  108.748736][ T5844] total_pgpgout 26092
[  108.767511][ T5844] total_pgfault 48300
[  108.769533][ T5844] total_pgmajfault 9
[  108.774110][ T5844] total_inactive_anon 0
[  108.775905][ T5844] total_active_anon 28672
[  108.777584][ T5844] total_inactive_file 0
[  108.779212][ T5844] total_active_file 0
[  108.781563][ T5844] total_unevictable 0
[  108.783068][ T5844] anon_cost 0
[  108.784322][ T5844] file_cost 0
[  108.804331][ T5844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.633,pid=7884,uid=0
[  108.830187][ T5844] Memory cgroup out of memory: Killed process 7887 (syz.0.633) total-vm:106384kB, anon-rss:1076kB, file-rss:27528kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  108.877218][ T7977] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  108.884748][ T7980] netlink: 'syz.2.663': attribute type 7 has an invalid length.
[  108.887386][ T7980] netlink: 'syz.2.663': attribute type 8 has an invalid length.
[  108.902092][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.908266][ T7980] bridge0: entered promiscuous mode
[  108.911029][ T7980] ip6gretap0: entered promiscuous mode
[  108.918278][ T7980] bridge0: left promiscuous mode
[  108.921089][ T7980] ip6gretap0: left promiscuous mode
[  108.947014][ T7977] bond1: (slave geneve2): making interface the new active one
[  108.951816][ T7977] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  109.086525][ T7991] bridge0: port 3(erspan0) entered blocking state
[  109.088736][ T7991] bridge0: port 3(erspan0) entered disabled state
[  109.091896][ T7991] erspan0: entered allmulticast mode
[  109.094527][ T7991] erspan0: entered promiscuous mode
[  109.097085][ T7991] bridge0: port 3(erspan0) entered blocking state
[  109.099630][ T7991] bridge0: port 3(erspan0) entered forwarding state
[  109.549813][ T8019] netlink: 'syz.2.674': attribute type 3 has an invalid length.
[  109.687191][ T8026] net veth1_virt_wifi : renamed from virt_wifi0
[  109.892674][ T8042] netlink: 'syz.0.686': attribute type 11 has an invalid length.
[  109.931436][ T8042] tipc: Enabled bearer <udp:syz2>, priority 10
[  110.067384][ T8066] netlink: 'syz.0.692': attribute type 1 has an invalid length.
[  110.075484][ T8066] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  110.094731][ T8062] __nla_validate_parse: 9 callbacks suppressed
[  110.094745][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.691'.
[  110.155481][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.694'.
[  110.298113][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'.
[  110.302424][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'.
[  110.556862][ T8109] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  111.234587][ T8116] syz_tun: entered allmulticast mode
[  111.241753][ T8113] syz_tun: left allmulticast mode
[  111.276387][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'.
[  111.318514][ T8125] pim6reg1: entered promiscuous mode
[  111.321030][ T8125] pim6reg1: entered allmulticast mode
[  111.394709][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'.
[  111.627395][ T8148] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  111.637218][ T8148] IPVS: lc: FWM 3 0x00000003 - no destination available
[  111.645084][ T8144] netlink: 244 bytes leftover after parsing attributes in process `syz.2.716'.
[  111.835300][ T8154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.839052][ T8154] syzkaller0: entered promiscuous mode
[  111.843055][ T8154] syzkaller0: entered allmulticast mode
[  111.854227][ T8154] tipc: Resetting bearer <eth:syzkaller0>
[  111.858654][ T8153] tipc: Resetting bearer <eth:syzkaller0>
[  111.872689][ T8153] tipc: Disabling bearer <eth:syzkaller0>
[  112.203814][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'.
[  112.518661][ T8186] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  112.553841][ T8184] lo speed is unknown, defaulting to 1000
[  112.585957][ T8188] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  112.588970][ T8189] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  112.659043][ T8194] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  112.666330][ T8194] netlink: 244 bytes leftover after parsing attributes in process `syz.0.731'.
[  113.059620][ T8216] netlink: 104 bytes leftover after parsing attributes in process `syz.1.739'.
[  113.217879][ T8229] netlink: 'syz.0.740': attribute type 4 has an invalid length.
[  113.251699][ T8229] netlink: 'syz.0.740': attribute type 4 has an invalid length.
[  113.354025][ T8249] gretap0: entered promiscuous mode
[  113.365365][ T8243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.739361][ T8286] lo speed is unknown, defaulting to 1000
[  113.994485][ T8310] @: renamed from veth0_vlan (while UP)
[  114.754832][ T8355] openvswitch: netlink: Key type 31 is not supported
[  115.381547][ T8394] __nla_validate_parse: 10 callbacks suppressed
[  115.381560][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  115.854472][ T8425] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  115.860763][ T8425] netlink: 244 bytes leftover after parsing attributes in process `syz.0.803'.
[  116.038303][ T8438] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  116.103179][ T8445] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  116.108099][ T8445] netlink: 'syz.2.810': attribute type 2 has an invalid length.
[  116.861626][ T8465] Bluetooth: MGMT ver 1.23
[  116.927966][ T8470] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  116.933346][ T8470] IPv6: Can't replace route, no match found
[  117.027760][ T8474] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  117.039588][ T8474] netlink: 'syz.1.820': attribute type 21 has an invalid length.
[  117.045512][ T8474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.820'.
[  117.078512][ T8474] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  117.084251][ T8476] netlink: 'syz.0.821': attribute type 10 has an invalid length.
[  117.100407][ T8476] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  117.162885][ T8482] netlink: 'syz.1.823': attribute type 4 has an invalid length.
[  117.201644][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'.
[  117.296992][ T8492] syzkaller1: entered promiscuous mode
[  117.298929][ T8492] syzkaller1: entered allmulticast mode
[  117.444165][ T8502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.830'.
[  117.634978][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'.
[  117.679281][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'.
[  117.773281][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.838'.
[  117.821007][ T8527] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  117.852957][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'.
[  117.868886][ T8533] netlink: 4520 bytes leftover after parsing attributes in process `syz.2.842'.
[  118.576678][ T8578] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  118.582237][ T8578] IPVS: lc: FWM 3 0x00000003 - no destination available
[  118.727659][ T8595] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  118.730716][ T8595] IPVS: lc: FWM 3 0x00000003 - no destination available
[  119.095052][ T8629] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  119.097738][ T8629] IPVS: lc: FWM 3 0x00000003 - no destination available
[  119.103752][ T8635] netlink: 'syz.2.879': attribute type 2 has an invalid length.
[  119.106327][ T8635] netlink: 'syz.2.879': attribute type 6 has an invalid length.
[  119.167671][ T8641] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  119.189476][ T8643] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  119.215457][ T8643] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  119.219545][ T8643] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  119.268664][ T8649] gretap2: entered promiscuous mode
[  119.283486][ T8649] bond4: (slave gretap2): making interface the new active one
[  119.286495][ T8649] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  119.298838][ T8643] macvlan2: entered promiscuous mode
[  119.301149][ T8643] macvlan2: entered allmulticast mode
[  119.303302][ T8643] bond4: entered promiscuous mode
[  119.306141][ T8643] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  119.311575][ T8643] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  119.316715][ T8643] bond4: left promiscuous mode
[  119.389132][ T8643] syz.2.883 (8643) used greatest stack depth: 19704 bytes left
[  119.452438][ T8658] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  119.731958][ T8690] batadv0: entered promiscuous mode
[  119.736744][ T8690] 8021q: adding VLAN 0 to HW filter on device hsr1
[  119.756823][ T8685] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  119.759736][ T8685] IPVS: lc: FWM 3 0x00000003 - no destination available
[  119.838346][ T8698] bridge: RTM_NEWNEIGH with invalid state 0x10
[  119.941688][ T8721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.394021][ T8758] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  120.397204][ T8758] __nla_validate_parse: 32 callbacks suppressed
[  120.397215][ T8758] netlink: 244 bytes leftover after parsing attributes in process `syz.0.925'.
[  120.459754][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'.
[  120.473685][ T8770] xfrm0: entered allmulticast mode
[  120.587567][ T8781] netlink: 'syz.0.932': attribute type 4 has an invalid length.
[  120.599493][ T8783] netlink: 596 bytes leftover after parsing attributes in process `syz.1.934'.
[  120.679380][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x21
[  121.399831][ T8805] netlink: 260 bytes leftover after parsing attributes in process `syz.0.941'.
[  121.405239][ T8805] netlink: 260 bytes leftover after parsing attributes in process `syz.0.941'.
[  121.452443][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'.
[  121.510622][ T8816] sctp: [Deprecated]: syz.1.945 (pid 8816) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.510622][ T8816] Use struct sctp_sack_info instead
[  121.609695][ T8825] validate_nla: 1 callbacks suppressed
[  121.609706][ T8825] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  121.618798][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.950'.
[  121.628870][ T8827] netlink: 'syz.0.950': attribute type 1 has an invalid length.
[  121.634442][ T8827] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.950'.
[  121.645399][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.950'.
[  121.673706][ T8825] netlink: 312 bytes leftover after parsing attributes in process `syz.2.949'.
[  122.263238][ T8872] netlink: 'syz.1.965': attribute type 2 has an invalid length.
[  122.267043][ T8872] netlink: 'syz.1.965': attribute type 2 has an invalid length.
[  122.602580][ T8886] Bluetooth: hci0: Opcode 0x0c1a failed: -4
Connection to localhost closed by remote host.
[  123.244283][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.248185][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  123.315335][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.318947][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  123.388491][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.393512][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  123.438492][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.442633][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 36976 - 0
[  123.566898][   T12] bridge_slave_1: left allmulticast mode
[  123.569248][   T12] bridge_slave_1: left promiscuous mode
[  123.573258][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.580229][   T12] bridge_slave_0: left allmulticast mode
[  123.582405][   T12] bridge_slave_0: left promiscuous mode
[  123.584262][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.674860][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  123.818057][   T12] team0: Port device geneve0 removed
[  123.899677][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  126.906408][   T12] bond1 (unregistering): Released all slaves
[  126.918619][   T12] bond2 (unregistering): Released all slaves
[  126.940767][   T12] bond3 (unregistering): Released all slaves
[  126.948580][   T12] bond0 (unregistering): Released all slaves
[  126.959275][   T12] bond4 (unregistering): Released all slaves
[  128.386715][   T12] tipc: Disabling bearer <eth:veth1_to_bridge>
[  128.392033][   T12] tipc: Disabling bearer <udp:syz2>
[  128.396517][   T12] tipc: Left network mode
[  128.411867][   T12] IPVS: stopping backup sync thread 6097 ...
[  128.635813][   T12] hsr_slave_0: left promiscuous mode
[  128.638864][   T12] hsr_slave_1: left promiscuous mode
[  128.641742][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.644610][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.648276][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.651611][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.672193][   T12] veth1_macvtap: left promiscuous mode
[  128.674655][   T12] veth0_macvtap: left promiscuous mode
[  128.677497][   T12] veth1_vlan: left promiscuous mode
[  128.679584][   T12] veth0_vlan: left promiscuous mode
[  128.974736][   T12] team0 (unregistering): Port device team_slave_1 removed
[  128.999402][   T12] team0 (unregistering): Port device team_slave_0 removed
[  129.493281][   T12] IPVS: stop unused estimator thread 0...
[  129.559540][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.627104][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.684138][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.721442][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.856495][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.907051][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.955879][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.013787][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.146321][   T12] erspan0: left allmulticast mode
[  130.148329][   T12] erspan0: left promiscuous mode
[  130.153218][   T12] bridge0: port 3(erspan0) entered disabled state
[  130.158251][   T12] bridge_slave_1: left allmulticast mode
[  130.161000][   T12] bridge_slave_1: left promiscuous mode
[  130.163292][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.168772][   T12] bridge_slave_0: left promiscuous mode
[  130.171465][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.179925][   T12] bridge_slave_1: left allmulticast mode
[  130.182716][   T12] bridge_slave_1: left promiscuous mode
[  130.185030][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.189511][   T12] bridge_slave_0: left allmulticast mode
[  130.194876][   T12] bridge_slave_0: left promiscuous mode
[  130.197236][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.392575][   T12] bond1 (unregistering): (slave geneve2): Releasing active interface
[  130.569589][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.572767][   T12] bond_slave_0: left promiscuous mode
[  130.576062][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.579053][   T12] bond_slave_1: left promiscuous mode
[  130.581576][   T12] bond0 (unregistering): Released all slaves
[  130.640083][   T12] bond1 (unregistering): Released all slaves
[  130.708380][   T12] bond4 (unregistering): (slave gretap2): Releasing active interface
[  130.746422][   T12] bond2 (unregistering): (slave geneve2): Releasing active interface
[  130.749096][   T12] geneve2 (unregistering): left promiscuous mode
[  130.954946][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.959366][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.963529][   T12] bond0 (unregistering): Released all slaves
[  131.019785][   T12] bond1 (unregistering): Released all slaves
[  131.080701][   T12] bond2 (unregistering): Released all slaves
[  131.088442][   T12] bond3 (unregistering): Released all slaves
[  131.096254][   T12] bond4 (unregistering): Released all slaves
[  131.105705][   T12] bond5 (unregistering): Released all slaves
[  131.215031][   T12] tipc: Left network mode
[  131.221930][   T12] tipc: Disabling bearer <eth:veth1_to_bridge>
[  131.232801][   T12] tipc: Disabling bearer <udp:syz2>
[  131.234521][   T12] tipc: Left network mode
[  131.258830][   T12] IPVS: stopping backup sync thread 7234 ...
[  131.996362][   T12] batadv0: left promiscuous mode
[  132.001650][   T12] hsr_slave_0: left promiscuous mode
[  132.003951][   T12] hsr_slave_1: left promiscuous mode
[  132.005980][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.008360][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.017458][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.019789][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.026801][   T12] hsr_slave_0: left promiscuous mode
[  132.029033][   T12] hsr_slave_1: left promiscuous mode
[  132.031200][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.033614][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.052410][   T12] veth1_macvtap: left promiscuous mode
[  132.054456][   T12] veth0_macvtap: left promiscuous mode
[  132.056193][   T12] veth1_vlan: left promiscuous mode
[  132.057857][   T12] @: left promiscuous mode
[  132.061784][   T12] veth1_macvtap: left promiscuous mode
[  132.063543][   T12] veth0_macvtap: left promiscuous mode
[  132.065283][   T12] veth1_vlan: left promiscuous mode
[  132.477782][   T12] team0 (unregistering): Port device team_slave_1 removed
[  132.909900][   T12] team0 (unregistering): Port device team_slave_1 removed
[  132.932553][   T12] team0 (unregistering): Port device team_slave_0 removed
[  133.162301][ T5913] lo speed is unknown, defaulting to 1000
[  133.164701][ T5913] syz0: Port: 1 Link DOWN
[  133.658519][   T12] ------------[ cut here ]------------
[  133.660923][   T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  133.664779][   T12] Modules linked in:
[  133.666471][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  133.670067][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.673846][   T12] Workqueue: netns cleanup_net
[  133.675680][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  133.677912][   T12] Code: 68 2e dd f7 4b 83 3c 2c 00 75 19 e8 ac ac 79 f7 49 81 fd f8 07 00 00 74 1d e8 9e ac 79 f7 49 83 c5 08 eb c9 e8 93 ac 79 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  133.685244][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  133.687537][   T12] RAX: ffffffff8a46022d RBX: ffff888023328000 RCX: ffff88801c2f5640
[  133.690524][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b1ac6 RDI: ffff888023328000
[  133.693525][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6
[  133.696511][   T12] R10: dffffc0000000000 R11: fffffbfff1f460c7 R12: ffff888023328000
[  133.699552][   T12] R13: 0000000000000000 R14: ffff8880291c0000 R15: dffffc0000000000
[  133.702606][   T12] FS:  0000000000000000(0000) GS:ffff8880b8639000(0000) knlGS:0000000000000000
[  133.705917][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.708392][   T12] CR2: 0000565064d2cc20 CR3: 000000010b0aa000 CR4: 00000000000006f0
[  133.711462][   T12] Call Trace:
[  133.712765][   T12]  <TASK>
[  133.713912][   T12]  ops_undo_list+0x49a/0x990
[  133.715675][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  133.717597][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  133.719552][   T12]  cleanup_net+0x4c5/0x800
[  133.721374][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  133.723235][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.725158][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  133.727281][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  133.729334][   T12]  process_scheduled_works+0xae1/0x17b0
[  133.731516][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.733779][   T12]  worker_thread+0x8a0/0xda0
[  133.735327][   T12]  kthread+0x711/0x8a0
[  133.736664][   T12]  ? __pfx_worker_thread+0x10/0x10
[  133.738489][   T12]  ? __pfx_kthread+0x10/0x10
[  133.740142][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.741756][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.743393][   T12]  ? __pfx_kthread+0x10/0x10
[  133.744927][   T12]  ret_from_fork+0x439/0x7d0
[  133.746536][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  133.748087][   T12]  ? __switch_to_asm+0x39/0x70
[  133.749544][   T12]  ? __switch_to_asm+0x33/0x70
[  133.751116][   T12]  ? __pfx_kthread+0x10/0x10
[  133.752535][   T12]  ret_from_fork_asm+0x1a/0x30
[  133.753957][   T12]  </TASK>
[  133.754969][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  133.757347][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  133.760244][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.763322][   T12] Workqueue: netns cleanup_net
[  133.764820][   T12] Call Trace:
[  133.765853][   T12]  <TASK>
[  133.766743][   T12]  dump_stack_lvl+0x99/0x250
[  133.768143][   T12]  ? __asan_memcpy+0x40/0x70
[  133.769722][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.771404][   T12]  ? __pfx__printk+0x10/0x10
[  133.772848][   T12]  vpanic+0x281/0x750
[  133.774095][   T12]  ? __pfx__printk+0x10/0x10
[  133.775550][   T12]  ? __pfx_vpanic+0x10/0x10
[  133.776961][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  133.778594][   T12]  panic+0xb9/0xc0
[  133.779752][   T12]  ? __pfx_panic+0x10/0x10
[  133.781118][   T12]  __warn+0x31b/0x4b0
[  133.782369][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  133.784004][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  133.785641][   T12]  report_bug+0x2be/0x4f0
[  133.786935][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  133.788543][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  133.790182][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  133.791815][   T12]  handle_bug+0x84/0x160
[  133.793109][   T12]  exc_invalid_op+0x1a/0x50
[  133.794594][   T12]  asm_exc_invalid_op+0x1a/0x20
[  133.796080][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  133.798319][   T12] Code: 68 2e dd f7 4b 83 3c 2c 00 75 19 e8 ac ac 79 f7 49 81 fd f8 07 00 00 74 1d e8 9e ac 79 f7 49 83 c5 08 eb c9 e8 93 ac 79 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  133.805228][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  133.807606][   T12] RAX: ffffffff8a46022d RBX: ffff888023328000 RCX: ffff88801c2f5640
[  133.810560][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b1ac6 RDI: ffff888023328000
[  133.813665][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6
[  133.816790][   T12] R10: dffffc0000000000 R11: fffffbfff1f460c7 R12: ffff888023328000
[  133.819949][   T12] R13: 0000000000000000 R14: ffff8880291c0000 R15: dffffc0000000000
[  133.822995][   T12]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  133.825183][   T12]  ops_undo_list+0x49a/0x990
[  133.827058][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  133.829117][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  133.830875][   T12]  cleanup_net+0x4c5/0x800
[  133.832653][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  133.834635][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.836683][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  133.838936][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  133.841049][   T12]  process_scheduled_works+0xae1/0x17b0
[  133.843291][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.845245][   T12]  worker_thread+0x8a0/0xda0
[  133.846799][   T12]  kthread+0x711/0x8a0
[  133.848474][   T12]  ? __pfx_worker_thread+0x10/0x10
[  133.850494][   T12]  ? __pfx_kthread+0x10/0x10
[  133.852331][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.854419][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.856483][   T12]  ? __pfx_kthread+0x10/0x10
[  133.858371][   T12]  ret_from_fork+0x439/0x7d0
[  133.860235][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  133.862269][   T12]  ? __switch_to_asm+0x39/0x70
[  133.864156][   T12]  ? __switch_to_asm+0x33/0x70
[  133.865960][   T12]  ? __pfx_kthread+0x10/0x10
[  133.867660][   T12]  ret_from_fork_asm+0x1a/0x30
[  133.869994][   T12]  </TASK>
[  133.871946][   T12] Kernel Offset: disabled
[  133.873689][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:44:18  Registers:
info registers vcpu 0

CPU#0
RAX=000000000001d801 RBX=0000000000000a9b RCX=000000000001d801 RDX=ffffffff93622338
RSI=0000000000000005 RDI=000000000002e838 RBP=ffffffff93a627b0 RSP=ffffc900000f7538
R8 =0000000000000000 R9 =ffffffff81aa8678 R10=dffffc0000000000 R11=fffffbfff1f460c7
R12=00000000000428e0 R13=0000000000000000 R14=ffffffff92aad462 R15=000000000001d8a9
RIP=ffffffff819dd81d RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8639000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe0be5e008 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=000000000000021c 00000031130b702f
XMM06=ffffffffffff0000 ffffff0000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffff0000000000 XMM09=0000000000000221 000000317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=6f8af7796731cd00 RBX=ffffffff81968528 RCX=6f8af7796731cd00 RDX=0000000000000001
RSI=ffffffff8d9b1ac6 RDI=ffffffff8be33f80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa30630 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b73d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c39000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f85a24ce440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=0000000000000091 000000314d68492f
XMM06=ffffffffffffff00 ffffff0000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=0000000000000091 000000317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
