last executing test programs:

1.366662818s ago: executing program 0 (id=1011):
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
epoll_create1(0x0)
socket(0x1, 0x80802, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.156950735s ago: executing program 0 (id=1014):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24044800}, 0x20000000)

1.147092504s ago: executing program 0 (id=1018):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.070081852s ago: executing program 0 (id=1021):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/238, 0xee}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000700)=""/127, 0x7f}], 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/34, 0x22}, {&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000940)=""/38, 0x26}, {&(0x7f0000000980)=""/94, 0x5e}, {0x0}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x7, &(0x7f0000000b40)=""/172, 0xac}, 0xffffffff}, {{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f00000020c0)}, 0x1}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/98, 0x62}, {&(0x7f0000002200)=""/171, 0xab}], 0x2, &(0x7f0000002300)=""/47, 0x2f}, 0x800}, {{&(0x7f0000002340)=@hci, 0x80, &(0x7f0000002880)=[{&(0x7f00000023c0)=""/51, 0x33}, {&(0x7f00000024c0)=""/119, 0x77}, {0x0}, {&(0x7f0000002580)=""/118, 0x76}, {&(0x7f0000002600)=""/158, 0x9e}, {0x0}, {&(0x7f0000002740)=""/251, 0xfb}, {&(0x7f0000002840)=""/11, 0xb}], 0x8}, 0x800}, {{&(0x7f0000002940)=@phonet, 0x80, &(0x7f0000002a00)=[{&(0x7f00000029c0)=""/58, 0x3a}], 0x1, &(0x7f0000002a40)=""/238, 0xee}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002b40)=""/173, 0xad}, {&(0x7f0000002c00)=""/195, 0xc3}, {&(0x7f0000002d00)=""/101, 0x65}, {&(0x7f0000002d80)=""/249, 0xf9}, {&(0x7f0000002e80)=""/88, 0x58}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003540)=""/218, 0xda}, {&(0x7f0000003640)=""/119, 0x77}], 0x2, &(0x7f0000003700)=""/175, 0xaf}, 0x6}, {{&(0x7f00000037c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003840)=""/115, 0x73}, {&(0x7f00000038c0)=""/72, 0x48}, {&(0x7f0000003940)=""/15, 0xf}, {&(0x7f0000003980)=""/166, 0xa6}, {0x0}], 0x5}, 0xffffff81}], 0x9, 0x61, &(0x7f0000003e00))
unshare(0x6020400)
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x4000006}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6e7c)
sendto$inet6(r1, &(0x7f0000000000)="c6d3ffb6018f3252c0e0abd6f658286a85230100e6255511", 0xfffffdc9, 0x1, 0x0, 0xf)
shutdown(r1, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1400000010bc7a686e10e5e04f0000000000000a20000000090a0104000000000000000000002c000900020073797a3100000000140000001004000000000000000000000084000a0bcc267b01fb40c142635ca826d0ecbe4162d8e39cbb2bc20a6d48092965c3a107ca8f645794f5d23c6b92172497919131c4374cc4627daf1feafdb80b17f9aa70746e5037640633f62e3a1fc451fff275a962b46a973eb52705c7e15fcc0c157d16d6a668bee2f8b480fe60aafd60086728203afb152218e599eb03b67e08edfba9812c11c0f34da667a711b83bf1aed2692e8d4e595b4d7a54b8b5aa4e99284fdd27b440aeff2aa2c06376fc20d01cbb8c0f60132d2bf5b694c91a11ed59b72462a8c882fc1c762f437370e0c85b878289cbb8a3bc36f2"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000c00)='veth1_to_bond\x00', 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r7, 0x0, 0x0, 0x100, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000180)=0x30)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

539.228581ms ago: executing program 2 (id=1032):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x0, 0x6}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0xb, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4004810)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012d00"/18, @ANYRES32=r8, @ANYBLOB="0c00990009000000640000000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a001a0008021100000100000a0006000802110000010000"], 0x70}, 0x1, 0x0, 0x0, 0x8880}, 0x80)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x70bd2a, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x4084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201610000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94)

380.406845ms ago: executing program 2 (id=1036):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x38, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)

341.699293ms ago: executing program 2 (id=1038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x9}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)

341.408882ms ago: executing program 1 (id=1039):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x1}, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}]}, {0x0, [0x61, 0x0, 0x30, 0x2e]}}, 0x0, 0x52}, 0x28) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
r3 = socket(0x2, 0x3, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000100000061115c0000000000850000000200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) (async)
bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async)
sendto$inet(r3, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_cmd={0x7, 0x7, 0xd, 0x1, 0x0, 0x73, 0x5d, 0xfc, 0x6, 0x8, 0xffffff04, 0x9, 0x3, 0x4, 0x9, 0x0, [0x80, 0x9]}}) (async)
accept(r3, &(0x7f0000000180)=@qipcrtr, &(0x7f00000003c0)=0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000f604000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c002300000000000000000005002a00ff000000"], 0x48}, 0x1, 0x0, 0x0, 0x48105}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x56}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x30}}]}, 0x1c}}, 0x8080) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115d00000000008510000002000000850000000500000095000000000000009500a50500200000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

258.385971ms ago: executing program 1 (id=1040):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4008af10, &(0x7f0000000080)) (async)
r2 = socket(0x11, 0x800000003, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff00}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1, 0x3f00}, @generic={0x5, 0x0, 0x0, 0x2, 0x27}, @jmp, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0}) (async)
r4 = accept4$unix(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0xc0000)
recvmmsg$unix(r4, &(0x7f0000001940)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/226, 0xe2}], 0x5}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000740)=""/32, 0x20}, {&(0x7f0000000800)=""/224, 0xe0}, {&(0x7f0000000900)=""/238, 0xee}], 0x4, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/172, 0xac}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/177, 0xb1}], 0x3, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/231, 0xe7}, {&(0x7f0000000f40)=""/93, 0x5d}, {&(0x7f0000000fc0)=""/58, 0x3a}, {&(0x7f0000001000)=""/199, 0xc7}, {&(0x7f0000001100)=""/55, 0x37}, {&(0x7f0000001140)=""/246, 0xf6}], 0x6, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001440)=""/135, 0x87}, {&(0x7f0000001500)=""/116, 0x74}, {&(0x7f0000001580)=""/222, 0xde}, {&(0x7f0000001680)=""/205, 0xcd}, {&(0x7f0000001780)=""/2, 0x2}, {&(0x7f00000017c0)=""/92, 0x5c}], 0x6, &(0x7f00000018c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x5, 0x80000061, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r5], 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfffffe32, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xb4, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0)

257.540761ms ago: executing program 2 (id=1041):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg1\x00'})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x22, &(0x7f0000000a00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000000b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff0000ffffb703000008000000b704000002000000850000008200000085100000fdffffff1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000181100"/140, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800003c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000b40)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x8, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001b40)=[{0x5, 0x5, 0xa, 0xc}, {0x4, 0x1, 0x7, 0x9}, {0x0, 0x4, 0xc, 0xc}, {0x2, 0x5, 0x4, 0x6}, {0x5, 0x1, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x2}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x9}, 0x94)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000440)={0xffffffffffffffff, 0x17, "bf3ef7", 0xa0, 0x4})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000480)={0x0, 0xf96, 0x2})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={<r5=>r3, 0x6, 0xfffffffffffffff9, 0x1ff})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)
write$cgroup_type(r5, &(0x7f0000000240), 0x9)
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=r6], 0xb8}}, 0x4004)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES32=r2, @ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x9, [{0x8, 0x2}, {0x7, 0x2, 0x8}, {0xa, 0x2, 0x9}, {0xe, 0x4, 0x80000000}]}, @enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x4, [{0xd, 0x1, 0xae53}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/59, 0x7b, 0x3b, 0x1, 0x80000000}, 0x28)

191.048916ms ago: executing program 1 (id=1042):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000001500)={0x3, @bcast, r3})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], <r6=>0x0, 0x4a, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000001340)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f00000014c0)=ANY=[@ANYRES16=r5], &(0x7f00000001c0)='GPL\x00', 0x40040, 0xffffffffffffff00, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0xfffffffffffffce5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148500000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

188.039717ms ago: executing program 0 (id=1043):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote, 0x5}}, 0xd, 0x4, 0x7, 0xfffffffd, 0x20, 0x5, 0x7}, &(0x7f0000000100)=0x9c)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000048c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x33a8, 0x1e, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3364, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x78}]}}}]}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x260, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "fda796d7ee57d782fbdb1ba182859917e9fc9c84ab52d85a65fbbc26361ce9f6bdd3a4ce8758e00347d1f47c5613d099852a838c03d5dcc3f9d5efd6"}, @NFTA_DATA_VALUE={0x16, 0x1, "d909294f822f12b8500aa8032cbe8c7c11bb"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "3ce4d456e8c09b054b5c850046bccb4a64249b212508140d21b82e9ca50004ebb7e8f9bf7ab5a7d11ae6f56f7f2bf323dbe2662e44fc458fe3441e7f811a8b07650bd4168eabf1151668bb51b9cc149d4cdc541e3e96dad1f38ab6169dc6c2cdd91edb25b0f6a6a6f6adb961f36f9cfa6196726bd3a8091d8070a64a7e948f80452107d50421937b991a09ca8fe1e658d148b519b9ce07d368ab369e7d91764a25105c814cb94794a9de8aeb5b9b0413ca476b7c4bb5c486de118dcf4b230ba92473a16868bfc4f9cbbbfce71b05c2679590c1446908cfee258d864560"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x17e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "46b7a17a8772d54852e5e517857a242e625ad1ddf9ed8b27b943bd17585cb5a52342dc7203c5c271ed0228aeed72aebbdc96d1b84b85ea29119cc481b629b8cb6f0aa66d9e1337c9715df5482be74044141b42e29b9ef11733d14fee4aedce8425bf03f6406268912b04f174e0306a1d50a2cf37f3c14cb48b2758a1951c00a0fc4fbebf073802bcfad629e53845468f366b57431e8040aede1df496edab5d6e14908714ba8ed79f1c64760b77043d7519dabc957893e5b7679331a9818054a5afc1dde8779c3a2138cf5fc419cbb3418c099aed8f27c5a6dfeaf9a3ce"}, @NFTA_DATA_VALUE={0xad, 0x1, "97c2d26fc5cb05374b8ad1f8322e06aefcb45de18ea40781faba7a3cb2252a0e51aa3ab3c59afa1965006b2c6a6c28942f9e1b1950b1ee5e46548dd675bdd583a39472d823aa828774b9ebb9b70af0dfc33e2772a0aed1d77f96ad0db306381cd1ff0850348e3638e5a7bf3ec5ed273942129e1823805a56b5c2e08e125ffa10b162c69215f215387d3347335d6769de82775aee6ff737d907028b228034b85d21f0bfd6e900687b77"}, @NFTA_DATA_VALUE={0x8b, 0x1, "06d55dcefbd09518b14e952febec86e425b9378e1d3b0f758f5f6996b57bef8537d2934f1e58e53e6c4c0f9997b80f33e48724597a3e89af484b635087270e5af77c6608128447492be111d31247eb6b9486482b2cd971265675ee841accd2c33079e2e6de18ea3fa7a0b44a96f2feea039517b91f482435c9c663c34a2bd7b2b054b2f4854d34"}]}, @NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xed, 0x1, "e786c4ea32a198f766dd3af4a4e994976d2d8b60dc35d673ff08c8c7c15728a5500d5e64d94d381ada3af27b7835fbe0495dd7b24d7c7ab6e85bde6ad849700d0565e250de6864f08477cd1affb469c50c5b712e6426586349b342aeb20789d90af665bc44214cf32f5d59d7eb07ba86fa7d604a1ea4f1bfafccbb7f7b28fd7186dc56de4a46b768f9ecb59a27f0ec16be1c940f2505c604fbe97e29961d9efad37d3d683d6cb6184823e995825e9ac0e99967c698b336ae96d62095a81605afd4654d5406b80e73e5e8d5889579ce52ecaa57f83052880209ad11bf40ddcf38985966acc668065ccd"}, @NFTA_DATA_VALUE={0x7c, 0x1, "1099cde025e57c939ff6487f071a09bbda7aad499f7c7487654d3733d670b1f70f771ebeaa91f2df5ee58d167c064301b717c7844023bdc4e8d2fa187a2987e93e986545db9721809582441874f3d2236bd78136dfb5d89efaeaa1b9005b971f5a0e6ee159300a6036840b7da277cdaf395a250cc0c49412"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x135c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "952c6a3a25136c38eaad5ab73caacfe3b142a3d4a23cfb3624a1419bcedf7754e431013002715e07487521f8180ef0677d0572c249776cf9d3b357c28782ea0b536277693cb3aa2840077ae34928ac80d9b5ad62354ed4092e13b8ca02394b9898293a89ff1b8737b6900bf4c168e645b3079894d0617c5dc87c1debff879ccb867bff679a0b4114dcc26261e463128f3c382a3b3818a5d5f987713d34452c842272f1fe03a64c0a4ea5062a8f64db742fd832ee29"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xac, 0x1, "a1dd86020aa68b5257446ee3e66af60fcccf36ad9c795b62c13215300cfb9b536ed1b617d5a3b5b6df44e33e6a32ef37310b735fab6ca3f9f567ff55deaad4bc2a2ae879596f33fc250033c01a27a0be371b46dc96d2f9bc52656f4a24378fa4deb9c506e8d30347aa856009d9992784a4a8da757698107a3a3224e54e2feb0d7df32900407fb01a2e020cb7ecbf50f051a4037ff78e2d9911ed346fb50126c2c62629ffc877669a"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "45f9259f7ceb06da26e754293b07658dc37be4eb27a9a6ba83da0c652c1e213c4c7eda17237b8192f478f51b4a24df84d1f2f1a622a10fc7ce58c6beaea921ab6ff0168336b70c6adc105ed5e7e5b095a35035d98ffb41afbd4590992dfb7030c184d3f595dcf2ab6b986c74704d788f455c701bb8cd16e71672dca6aaa32980e6cff34ecc2a14284faa500a3234f11d98fec6809167d5aee0e923d06a"}, @NFTA_DATA_VALUE={0xa1, 0x1, "b26d1cc87055ee53fde7d872164dd1ace5b05558bfc1bcfa14e8d148847dbf16ac07e1ca42b8fcb2c62c4641ecdad72707350f73b8f713dec5f4cc048563a21f8fa246eac7ff026503c1d6a63a9d6923df3ad0da36ac31935deef8773c91adefa5ad0920a527f8f1f7b7b7821744920474448315953e025c83016df58ffa83f81d4b98b37370d9dedf8946359872e4c66ceed8fb8f6a2a3f161607527e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x45, 0x6, 0x1, 0x0, "a882d6a1b3da07f039cbd9602cb6e0e45618b5110ab4cfa23f63b378344d53e82ecfd1334bb994b3a14c98857e77f342f6a673639df4e7d355d6691c84fdbc45a9"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x1834, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x143c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "685102cd1df4d11d7313972f22133ce155c0114841d7b6712f24e49da10f88387a35d6218dd15d651f840c8f50a787b44e09c4dc6124839db4b3a9fa3659268545c55d8b66d54729d7df597501247cfff0b4"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb8, 0x1, "0326202d2668ea9ed991d875a77a79fff85ec70458d593b151d3ff68dfb0c48f389ef01ac79af06e33977108cf1611834d19d10a77f32e01febb929a3604b2b0f22f98d10e13952353eefbac76af1e4eedcf47520d571a6decbbf130a7948507ebe515b3e40541ffacf4a0554ba63524cb61dba230f3f3f5e2527076206134a83104cb4e0d14161feb8e5486981b696a5637e13ec932917afe1a342e0f5b3a6c97c0b5244bcae67ba3ef1ac9c77beae611de5ec4"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "07f598c2b916c961f3109256b9bcacf62c9c32bca431eb1c1494b9288e173dbe4646a33f6bb30097b90c63900a5cc1e38e18569c66b3b64d9d3fe6a71507ad443f4e2af24800aab33d7b3f4bef4109bdde1b10d407988c61ca"}, @NFTA_DATA_VALUE={0xd1, 0x1, "46b3c86f22a23760235583f8241cbaf6f63702d8afa5c21c28aebe621e7dabe34e7d2c71a1c2e66387bab883e01456a49518e8489bcc330ef728b7c0568e63c73914df32fe34e9ae0b3ef370a223d6f366572aae45b4aa88739b902b03f5a944de74fc742345915de75377a44a96de44acc781b8d99854f5f93f06485bbe704a5c4b237012c3cdb31d3460c725f52d63da214b52c343f486ca90a4026de97a20e907c34cecdac5ba0306a59fa333aa218f3ce8ecb29b523062d96019492c4f72112a2c0a19eac736d4bb733d15"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "fb1698088960f7059c6f8a82e825b28d21e83fe355e7646b9a4ab774d82dacfbd73428f59f12507ce7043cf9eb1538ace81cb2236a39b86bd6434843e32c46158707a99bbbe1a7019a232edb7d33132ad8855508db3565031f4e9a0051be9867f206a6259c37d4564ee59965f29190857c6f98a4f25bcbb20f0d5f31705f63963d2a9a87a3dcd64a3ea541d229ee8acb207d4a41f74a55c43a6d8c0b6f70b0a18360319158b0fbbd9f1ccd338452f9ae757111022796d4869310a5d7eda9545c44d1"}, @NFTA_DATA_VALUE={0xac, 0x1, "d8b1bf1be4214263b345bdab21f0da882fce82283c1af630152aa4c6232a618f612262341810259fcda0b2ace05be342946a8b64378fabfa975a1b260cd6918e74521a35ca269a1aeb892ed6c7d0a69a4507238a1aa131151d2c4500c6e400bb0701fe6ec1766d93a3ed3bd63adf607b6f3004e6ac299177f8d85dbce14855c93fdedcd4a4adc995a837ba76e26eaa17233d5a8ffed2b70b4ff5404cfe12373eb3c410b628ff7dfb"}]}, @NFTA_SET_ELEM_KEY={0x2f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "fdecad4a146691c63c390b43134edc406e28981723eccb8e61c1b8bc0949728eefde67e1fa6e44533da74f740309ee18147f0a01dba478097570ccac70e0e5ae2a1bd7c99df90b5056afee188c602c649bd02db09db803423ea6c41281bb9c7f723818820a88a8732185423b2d4c72c208f3ccbff89dffa5c4b02bedae7c3ce81c371fb5c542014bd33c1d44d0f530bcbbc611efc544c3aa8e3736029ca75f195009859ad82f8f953f953670e2b0dff17be27b5b9deb1204c29b37415b570baa847a5421f02125738fc4e4"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "65519cc4964c4a340ab713245a333018b43076f2761a57961f239a6fad9e2b9567494368b9562d774d0b23f291ba80c44d2f730c529451a4ee6ad31772f3e24b9da6ad4523fb557a4aa1bcac5c450c92b043b17aa1289ac05dd4fa34c3edc8528be51a7c0e5027fc6fa860c3e4a387d3ea6a6cdb07759bd87e3179a46e4258cf91fd75abe88dcb4a706c6e30ce2a375403726a10a3d7e09b08aa651b6e3497380d227d48dfdb4d667afd724ce94d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "e6c67d05398f9f7a341e85d486d9fa5e52689e416a859f30fc3f057c4f1bb7e0a49b520c8ed49578ccbbb6f8336ac4d1630456d6e60b4ab8ed80dd9488074cdedbfde0afc1104c42aa4a0558625b176a5012f76395d412c0118b1b0c2177374e07c0c3d6d3cee94ef58ef004db2e866c1157b0b957b44d9ed78657c2b5ec4d1042be52e8db1091b9e0de1164b3edfd3c7a8013ba624501c9221bc97279758b4438cec73687aab261829d04034536d8d715b82738d976b3e68fca9b77cdd9b316f45671f6900fc0fa6a9e0c12733cfcfa55d149706e548953daab44df66d577e24a6536f0"}]}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x54}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x3f, 0x6, 0x1, 0x0, "3fa2fd3f16350b839d0c7430b5531dc114ae6e625e5808f246ec1d7143bd1a3137a17ddb59e6ca5c2d03aa37c46019300c9b038179c3bf9130f5e0"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x342c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140))
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf252800000005002b004200000008002c000100000005002e006f00000008000200", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x20000000)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x8080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711061000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

187.132129ms ago: executing program 2 (id=1044):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x181400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d71188d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

137.574771ms ago: executing program 1 (id=1045):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4851}, 0x40)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x12, 0x1, 0x0, 0x3, {0xf, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x3], [], 0x0, [0x3, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010)

136.717717ms ago: executing program 0 (id=1046):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
unshare(0x6a040000)
syz_emit_ethernet(0x8e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x50, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [@dstopts={0x3a}, @hopopts={0xc, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0xff, 0x7fff}}]}]}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000076000d0b00400000008000000300000000000000080001000200000008000a00010000a4"], 0x28}}, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0xe, 0x20, 0xdbe}, 0x2f)
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6e)

136.268446ms ago: executing program 2 (id=1047):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
nanosleep(&(0x7f0000000080)={0x77359400}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000040)=0x3)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x46000040}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

80.296896ms ago: executing program 1 (id=1048):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x20, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x20000000) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0x8, 0x4) (async)
r3 = socket(0x40000000015, 0x5, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/48, 0x30}, 0x85ae}], 0x1, 0x60010062, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000008b1199000000000085100000020000008500ff000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async)
sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010a01040000000000000000010000070900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r11=>0x0}) (rerun: 32)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)
r12 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

0s ago: executing program 1 (id=1049):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
r6 = socket$netlink(0x10, 0x3, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3b8, 0xe8, 0x0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f00000000c0), {[{{@arp={@private=0xa010100, @broadcast, 0xffffff00, 0xffffff00, 0x2, 0x5, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x100, 0x200, 0x7f, 0x1, 0x101, 0x5, 'hsr0\x00', 'team0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffffff, 0xe, 0x8, {@empty, {[0x0, 0xd18104e9ae29fe63, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff]}}, 0xc3, 0x7, 0x1, 0x7, 0x2, 0x4da, 'vxcan1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x244}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xdc8fda3a, 0x6ac2}}}, {{@arp={@rand_addr=0x64010102, @loopback, 0xffffff00, 0xff, 0x8, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0xb, 0x8, 0x9, 0xc, 0x5, 'bond_slave_0\x00', 'macvtap0\x00', {0xff}, {}, 0x0, 0x80}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xc, {0x3}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
r7 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r7, 0x114, 0x251b, 0x0, &(0x7f0000019440))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r9, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23449' (ED25519) to the list of known hosts.
syzkaller login: [   48.664095][ T5793] cgroup: Unknown subsys name 'net'
[   48.784767][ T5793] cgroup: Unknown subsys name 'cpuset'
[   48.788867][ T5793] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.544655][ T5793] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.908333][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.912022][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.914967][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.917500][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.920398][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.924014][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.938835][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.942486][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.946082][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.948804][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.990771][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.993945][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.002249][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.005239][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.007997][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.220410][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.304760][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.357998][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.360685][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.363661][ T5843] bridge_slave_0: entered allmulticast mode
[   55.366661][ T5843] bridge_slave_0: entered promiscuous mode
[   55.375433][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.384922][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.387153][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.389440][ T5843] bridge_slave_1: entered allmulticast mode
[   55.393017][ T5843] bridge_slave_1: entered promiscuous mode
[   55.442771][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.455997][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.494735][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.497036][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.499765][ T5847] bridge_slave_0: entered allmulticast mode
[   55.504554][ T5847] bridge_slave_0: entered promiscuous mode
[   55.509241][ T5843] team0: Port device team_slave_0 added
[   55.520934][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.524727][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.527274][ T5847] bridge_slave_1: entered allmulticast mode
[   55.529988][ T5847] bridge_slave_1: entered promiscuous mode
[   55.534202][ T5843] team0: Port device team_slave_1 added
[   55.584382][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.587159][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.590005][ T5851] bridge_slave_0: entered allmulticast mode
[   55.594740][ T5851] bridge_slave_0: entered promiscuous mode
[   55.608087][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.610675][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.621774][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.626801][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.630316][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.633565][ T5851] bridge_slave_1: entered allmulticast mode
[   55.637195][ T5851] bridge_slave_1: entered promiscuous mode
[   55.642990][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.647695][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.650328][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.660544][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.688575][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.766047][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.771036][ T5847] team0: Port device team_slave_0 added
[   55.779924][ T5843] hsr_slave_0: entered promiscuous mode
[   55.783654][ T5843] hsr_slave_1: entered promiscuous mode
[   55.788568][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.794075][ T5847] team0: Port device team_slave_1 added
[   55.852164][ T5851] team0: Port device team_slave_0 added
[   55.869402][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.872795][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.882898][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.895051][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.897270][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.906404][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.911364][ T5851] team0: Port device team_slave_1 added
[   55.973463][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.976143][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.986249][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.991871][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.995012][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.003231][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.062635][ T5847] hsr_slave_0: entered promiscuous mode
[   56.065672][ T5847] hsr_slave_1: entered promiscuous mode
[   56.068410][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   56.070653][ T5847] Cannot create hsr debugfs directory
[   56.109969][ T5851] hsr_slave_0: entered promiscuous mode
[   56.113684][ T5851] hsr_slave_1: entered promiscuous mode
[   56.115873][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.117706][ T5851] Cannot create hsr debugfs directory
[   56.386843][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.405416][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.417173][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.433606][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.493509][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.502825][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.521400][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.532990][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.576636][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.584459][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.590668][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.603897][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.718444][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.754327][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.764554][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.767156][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.782938][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.785325][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.797988][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.809061][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.819409][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.839728][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.861019][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.863395][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.869133][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.871524][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.876377][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.878736][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.896175][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.898581][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.955120][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.958461][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.032373][   T54] Bluetooth: hci2: command tx timeout
[   57.032411][ T5235] Bluetooth: hci0: command tx timeout
[   57.034313][   T54] Bluetooth: hci1: command tx timeout
[   57.050602][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.080530][ T5843] veth0_vlan: entered promiscuous mode
[   57.089386][ T5843] veth1_vlan: entered promiscuous mode
[   57.107652][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.136933][ T5843] veth0_macvtap: entered promiscuous mode
[   57.149338][ T5843] veth1_macvtap: entered promiscuous mode
[   57.166702][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.174878][ T5851] veth0_vlan: entered promiscuous mode
[   57.183760][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.193477][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.196216][ T5851] veth1_vlan: entered promiscuous mode
[   57.215965][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.226183][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.237924][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.240708][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.298596][ T5847] veth0_vlan: entered promiscuous mode
[   57.303674][ T5851] veth0_macvtap: entered promiscuous mode
[   57.324655][ T5851] veth1_macvtap: entered promiscuous mode
[   57.330822][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.333142][ T5847] veth1_vlan: entered promiscuous mode
[   57.341789][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.368691][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.378835][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.385942][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.389997][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.394151][ T5741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.397519][ T5847] veth0_macvtap: entered promiscuous mode
[   57.404418][ T5741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.409806][ T5741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.413442][ T5741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.417478][ T5847] veth1_macvtap: entered promiscuous mode
[   57.460001][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.468888][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.474570][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.512558][ T5741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.515469][ T5909] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   57.518781][ T5741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.530929][ T2182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.534797][ T5741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.537507][ T5741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.543898][ T2182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.570009][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.590105][ T5909] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.590281][ T2182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.595306][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.601094][ T2182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.619856][ T5909] bond0: (slave bond_slave_1): Releasing backup interface
[   57.654989][  T706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.660216][  T706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.684148][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.688016][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.724378][ T5915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.727291][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.730130][ T5915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.735607][ T5915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.769689][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.783345][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.784047][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   57.789243][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   57.793768][ T5917] Zero length message leads to an empty skb
[   57.795774][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   57.804832][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   57.856759][ T5924] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   58.535473][ T5960] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET)
[   58.610617][ T5962] geneve2: entered promiscuous mode
[   58.639069][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'.
[   58.818409][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'.
[   58.867822][ T5976] bridge_slave_0: left allmulticast mode
[   58.870484][ T5976] bridge_slave_0: left promiscuous mode
[   58.874758][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.885831][ T5976] bridge_slave_1: left allmulticast mode
[   58.888392][ T5976] bridge_slave_1: left promiscuous mode
[   58.891000][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.899920][ T5976] bond0: (slave bond_slave_0): Releasing backup interface
[   58.917648][ T5976] bond0: (slave bond_slave_1): Releasing backup interface
[   58.973162][ T5976] team0: Port device team_slave_0 removed
[   59.007995][ T5976] team0: Port device team_slave_1 removed
[   59.011187][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.027790][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.031221][   T10] IPVS: starting estimator thread 0...
[   59.035209][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.037656][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.113161][ T5844] Bluetooth: hci1: command tx timeout
[   59.115400][ T5844] Bluetooth: hci0: command tx timeout
[   59.117596][ T5844] Bluetooth: hci2: command tx timeout
[   59.123689][ T5985] IPVS: using max 38 ests per chain, 91200 per kthread
[   59.200994][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.752484][ T6007] wireguard0: entered promiscuous mode
[   59.754717][ T6007] wireguard0: entered allmulticast mode
[   60.023650][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.047980][ T6020] bridge_slave_1 (unregistering): left allmulticast mode
[   60.050199][ T6020] bridge_slave_1 (unregistering): left promiscuous mode
[   60.053707][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.385911][ T6053] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   60.395074][ T6051] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.419511][ T6053] gretap1: entered promiscuous mode
[   60.918708][ T6096] netlink: 'syz.1.55': attribute type 1 has an invalid length.
[   60.995889][ T6102] xfrm1: entered allmulticast mode
[   61.120686][ T6108] tc_dump_action: action bad kind
[   61.191709][ T5235] Bluetooth: hci2: command tx timeout
[   61.191869][   T54] Bluetooth: hci1: command tx timeout
[   61.195484][ T5844] Bluetooth: hci0: command tx timeout
[   61.227123][ T6114] vxcan3: entered allmulticast mode
[   61.370133][ T5906] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[   61.543996][ T6120] erspan0: entered promiscuous mode
[   61.548751][ T6120] erspan0: left promiscuous mode
[   61.814331][ T6125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.822760][ T6125] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   61.870217][ T6136] wg1: entered promiscuous mode
[   61.872110][ T6136] wg1: entered allmulticast mode
[   62.178890][ T6151] vlan2: entered allmulticast mode
[   62.180775][ T6151] erspan0: entered allmulticast mode
[   62.905162][ T6205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.271766][ T5844] Bluetooth: hci2: command tx timeout
[   63.282398][ T5844] Bluetooth: hci0: command tx timeout
[   63.284927][   T54] Bluetooth: hci1: command tx timeout
[   63.978734][ T6225] syzkaller1: entered promiscuous mode
[   63.980632][ T6225] syzkaller1: entered allmulticast mode
[   64.425103][ T6236] __nla_validate_parse: 24 callbacks suppressed
[   64.425116][ T6236] netlink: 156 bytes leftover after parsing attributes in process `syz.2.94'.
[   64.809568][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'.
[   65.020374][ T6257] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.100'.
[   65.034343][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'.
[   65.223718][ T6262] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   65.226997][ T6262] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   65.426663][ T6268] raw_sendmsg: syz.2.102 forgot to set AF_INET. Fix it!
[   65.547731][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'.
[   65.563835][ T6199] Set syz1 is full, maxelem 65536 reached
[   65.663005][ T6285] netlink: 'syz.1.106': attribute type 39 has an invalid length.
[   65.817009][ T6292] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   65.821315][ T6292] netlink: 228 bytes leftover after parsing attributes in process `syz.2.108'.
[   66.129502][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'.
[   66.138265][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'.
[   66.249387][ T6328] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   66.256956][   T10] IPVS: starting estimator thread 0...
[   66.342048][ T6329] IPVS: using max 61 ests per chain, 146400 per kthread
[   66.386171][ T6319] infiniband syz2: set active
[   66.387936][ T6319] infiniband syz2: added macvlan1
[   66.391057][ T6319] syz2: rxe_create_cq: returned err = -12
[   66.402816][ T6319] infiniband syz2: Couldn't create ib_mad CQ
[   66.404924][ T6319] infiniband syz2: Couldn't open port 1
[   66.418433][ T6328] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   66.462943][ T6319] RDS/IB: syz2: added
[   66.478201][ T6319] smc: adding ib device syz2 with port count 1
[   66.480559][ T6319] smc:    ib device syz2 port 1 has pnetid 
[   66.553819][ T6340] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[   66.583671][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.797255][ T6355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.130'.
[   66.819382][ T6355] nbd: nbd1 already in use
[   66.979422][ T6361] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   66.993966][ T6361] bridge0: port 1(batadv2) entered blocking state
[   67.001071][ T6361] bridge0: port 1(batadv2) entered disabled state
[   67.007201][ T6361] batadv2: entered allmulticast mode
[   67.017228][ T6361] batadv2: entered promiscuous mode
[   67.206320][ T6373] nftables ruleset with unbound chain
[   67.283351][ T6383] netlink: 1 bytes leftover after parsing attributes in process `syz.0.139'.
[   67.298269][ T6383] tipc: Started in network mode
[   67.299928][ T6383] tipc: Node identity 000000000000000007, cluster identity 4711
[   67.473166][ T6388] delete_channel: no stack
[   67.477025][ T6394] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   67.495024][   T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[   67.498901][   T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[   67.892865][ T6436] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   67.936909][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.007733][ T6443] netlink: 'syz.2.159': attribute type 12 has an invalid length.
[   68.085361][ T6450] syzkaller1: entered promiscuous mode
[   68.087237][ T6450] syzkaller1: entered allmulticast mode
[   68.144840][ T6456] netlink: 'syz.2.164': attribute type 39 has an invalid length.
[   68.337657][ T6468] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.411104][ T6473] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.442325][ T6477] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   68.445522][ T6477] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   68.789793][ T6506] ieee802154 phy0 wpan0: encryption failed: -22
[   68.865093][ T6512] netlink: 'syz.1.184': attribute type 30 has an invalid length.
[   68.910419][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.910528][ T6512] netlink: 'syz.1.184': attribute type 30 has an invalid length.
[   68.920891][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.927150][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.944007][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.097318][ T6524] ipvlan3: entered promiscuous mode
[   69.103155][ T6524] bridge0: port 2(ipvlan3) entered blocking state
[   69.107099][ T6524] bridge0: port 2(ipvlan3) entered disabled state
[   69.109354][ T6524] ipvlan3: entered allmulticast mode
[   69.111049][ T6524] bridge0: entered allmulticast mode
[   69.114783][ T6524] ipvlan3: left allmulticast mode
[   69.116477][ T6524] bridge0: left allmulticast mode
[   69.840088][ T6568] netlink: 'syz.1.202': attribute type 3 has an invalid length.
[   69.853473][ T6568] __nla_validate_parse: 18 callbacks suppressed
[   69.853484][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[   70.112428][ T6577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'.
[   70.116096][ T6577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'.
[   70.121285][ T6577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'.
[   70.219634][ T6581] netlink: 196 bytes leftover after parsing attributes in process `syz.0.206'.
[   70.224736][ T6581] netlink: 'syz.0.206': attribute type 1 has an invalid length.
[   70.228662][ T6581] netlink: 'syz.0.206': attribute type 15 has an invalid length.
[   70.566098][ T6593] netlink: 220 bytes leftover after parsing attributes in process `syz.0.210'.
[   70.796871][ T6609] geneve2: entered promiscuous mode
[   70.803210][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'.
[   71.168006][ T6617] can: request_module (can-proto-0) failed.
[   71.198134][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.200449][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.327766][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   71.330606][ T6626] bridge_slave_1: left allmulticast mode
[   71.332885][ T6626] bridge_slave_1: left promiscuous mode
[   71.335348][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.340129][ T6626] bridge_slave_0: left allmulticast mode
[   71.346636][ T6626] bridge_slave_0: left promiscuous mode
[   71.348849][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.565927][ T6632] netlink: 68 bytes leftover after parsing attributes in process `syz.2.220'.
[   71.583694][ T6632] bond0: (slave bond_slave_0): Releasing backup interface
[   71.588896][ T6632] bond0: (slave bond_slave_1): Releasing backup interface
[   71.599082][ T6632] team0: Port device team_slave_0 removed
[   71.610145][ T6632] team0: Port device team_slave_1 removed
[   71.613627][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.616429][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.624558][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.627296][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.693937][ T6636] netlink: 'syz.1.221': attribute type 1 has an invalid length.
[   71.836079][ T6644] batadv2: left allmulticast mode
[   71.838081][ T6644] batadv2: left promiscuous mode
[   71.839959][ T6644] bridge0: port 1(batadv2) entered disabled state
[   71.846926][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'.
[   71.863556][ T6644] team0: Mode changed to "loadbalance"
[   72.145043][ T6661] openvswitch: netlink: Flow actions attr not present in new flow.
[   72.148214][ T6667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.158216][ T6668] tipc: Resetting bearer <eth:syzkaller0>
[   72.181935][ T6666] tipc: Disabling bearer <eth:syzkaller0>
[   72.223377][ T6673] macvlan1: entered promiscuous mode
[   72.228110][ T6673] ipvlan0: entered promiscuous mode
[   72.231357][ T6673] ipvlan0: left promiscuous mode
[   72.244407][ T6673] macvlan1: left promiscuous mode
[   72.314003][ T6675] openvswitch: netlink: Duplicate or invalid key (type 0).
[   72.316619][ T6675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.400666][ T6680] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.410914][ T6680] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.705633][   T24] IPVS: starting estimator thread 0...
[   72.793741][ T6704] IPVS: using max 38 ests per chain, 91200 per kthread
[   72.833478][ T6708] sctp: [Deprecated]: syz.1.243 (pid 6708) Use of int in max_burst socket option deprecated.
[   72.833478][ T6708] Use struct sctp_assoc_value instead
[   73.117009][ T6723] syzkaller1: entered promiscuous mode
[   73.118852][ T6723] syzkaller1: entered allmulticast mode
[   73.505056][ T6748] netlink: 'syz.0.256': attribute type 39 has an invalid length.
[   73.671910][ T6762] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR
[   73.837051][ T6785] ip6tnl3: entered promiscuous mode
[   74.009620][ T6807] netlink: 'syz.0.269': attribute type 3 has an invalid length.
[   74.488790][ T6837] vxcan2: entered promiscuous mode
[   74.564993][ T6845] Bluetooth: MGMT ver 1.23
[   74.609157][ T6847] bridge0: entered promiscuous mode
[   74.610987][ T6847] vlan2: entered promiscuous mode
[   74.613728][ T6847] bridge0: port 2(vlan2) entered blocking state
[   74.615930][ T6847] bridge0: port 2(vlan2) entered disabled state
[   74.618015][ T6847] vlan2: entered allmulticast mode
[   74.619628][ T6847] bridge0: entered allmulticast mode
[   74.627534][ T6847] vlan2: left allmulticast mode
[   74.629020][ T6847] bridge0: left allmulticast mode
[   74.919505][ T6878] __nla_validate_parse: 14 callbacks suppressed
[   74.919517][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.950859][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.957280][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.961293][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.973433][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.976198][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.979145][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.983944][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.987707][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   74.991206][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   75.062559][ T6890] netlink: 'syz.0.296': attribute type 39 has an invalid length.
[   75.070721][ T6893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.227359][ T6904] pim6reg: entered allmulticast mode
[   75.229453][ T6900] netlink: 'syz.0.299': attribute type 10 has an invalid length.
[   75.234594][ T6900] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.566824][ T6915] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   75.570980][ T6915] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   75.834983][ T6919] lo speed is unknown, defaulting to 1000
[   75.844177][ T6919] lo speed is unknown, defaulting to 1000
[   75.846824][ T6919] lo speed is unknown, defaulting to 1000
[   75.850079][ T6921] siw: device registration error -23
[   76.022468][ T6919] infiniband syz0: set active
[   76.024332][   T24] lo speed is unknown, defaulting to 1000
[   76.026688][ T6919] infiniband syz0: added lo
[   76.034813][ T6926] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR
[   76.067883][ T6919] RDS/IB: syz0: added
[   76.080833][ T6919] smc: adding ib device syz0 with port count 1
[   76.085057][ T6919] smc:    ib device syz0 port 1 has pnetid 
[   76.088569][   T24] lo speed is unknown, defaulting to 1000
[   76.092785][ T6919] lo speed is unknown, defaulting to 1000
[   76.284522][ T6919] lo speed is unknown, defaulting to 1000
[   76.446259][ T6919] lo speed is unknown, defaulting to 1000
[   76.473675][    C0] Illegal XDP return value 16128 on prog  (id 100) dev lo, expect packet loss!
[   76.577931][ T6954] netlink: 'syz.0.313': attribute type 1 has an invalid length.
[   77.724727][ T6983] syzkaller1: entered promiscuous mode
[   77.726814][ T6983] syzkaller1: entered allmulticast mode
[   77.736292][ T6983] netlink: 'syz.2.320': attribute type 5 has an invalid length.
[   78.324884][ T6994] lo speed is unknown, defaulting to 1000
[   78.605134][ T6994] netlink: 'syz.2.324': attribute type 6 has an invalid length.
[   79.085447][ T7019] nbd: must specify an index to disconnect
[   79.103506][ T7019] nbd: must specify an index to disconnect
[   79.375266][ T7039] syzkaller1: entered promiscuous mode
[   79.377149][ T7039] syzkaller1: entered allmulticast mode
[   79.436056][ T7046] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   79.439132][ T7046] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.848245][ T7062] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.856065][ T7062] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   80.018328][ T7071] __nla_validate_parse: 50 callbacks suppressed
[   80.018345][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[   80.120078][  T973] cfg80211: failed to load regulatory.db
[   80.394352][ T7095] Bluetooth: MGMT ver 1.23
[   80.566367][ T7107] netlink: 'syz.0.355': attribute type 9 has an invalid length.
[   80.716928][ T7123] IPVS: length: 49 != 24
[   80.845174][ T5294] udevd[5294]: worker [5846] terminated by signal 33 (Unknown signal 33)
[   80.848076][ T5294] udevd[5294]: worker [5846] failed while handling '/devices/virtual/block/loop2'
[   80.929993][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'.
[   80.936907][ T7141] netlink: 176 bytes leftover after parsing attributes in process `syz.2.365'.
[   80.975801][ T7141] netlink: 'syz.2.365': attribute type 4 has an invalid length.
[   80.985177][ T5912] lo speed is unknown, defaulting to 1000
[   80.987686][ T5912] syz0: Port: 1 Link DOWN
[   80.989542][ T5912] lo speed is unknown, defaulting to 1000
[   81.046183][ T7145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.050536][ T7145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.125171][ T7145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.129215][ T7145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.186339][ T7145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.189566][ T7145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.236520][ T7145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.239999][ T7145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.314809][ T5906] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.317549][ T5906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.327915][ T5906] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.330612][ T5906] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.341658][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.344415][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.354229][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.359233][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.586066][ T5294] udevd[5294]: worker [5853] terminated by signal 33 (Unknown signal 33)
[   81.588974][ T5294] udevd[5294]: worker [5853] failed while handling '/devices/virtual/block/loop0'
[   81.797727][ T7171] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   81.810396][ T7171] netlink: 128 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.820920][ T7171] netlink: 3 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.825612][ T7171] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   81.825894][ T7174] siw: device registration error -23
[   81.828121][ T7171] netlink: 128 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.835878][ T7171] netlink: 3 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.839010][ T7171] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   81.845017][ T7171] netlink: 128 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.848294][ T7171] netlink: 3 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.851900][ T7171] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   81.854608][ T7171] netlink: 128 bytes leftover after parsing attributes in process `syz.0.373'.
[   81.870619][ T7171] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   81.876475][ T7171] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   82.368690][ T7221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.371330][ T7221] IPv6: NLM_F_CREATE should be set when creating new route
[   82.373684][ T7221] IPv6: NLM_F_CREATE should be set when creating new route
[   82.526689][ T7231] vxcan2: entered promiscuous mode
[   82.807274][ T7262] validate_nla: 62 callbacks suppressed
[   82.807375][ T7262] netlink: 'syz.2.399': attribute type 2 has an invalid length.
[   82.813315][ T7262] netlink: 'syz.2.399': attribute type 1 has an invalid length.
[   82.854958][ T7267] geneve3: entered promiscuous mode
[   82.868775][ T7267] netlink: 'syz.2.400': attribute type 15 has an invalid length.
[   83.106375][ T7300] netlink: 'syz.2.414': attribute type 39 has an invalid length.
[   83.248961][ T7314] netlink: 'syz.0.418': attribute type 7 has an invalid length.
[   83.255685][ T7314] netlink: 'syz.0.418': attribute type 8 has an invalid length.
[   84.568507][ T7367] netlink: 'syz.2.435': attribute type 5 has an invalid length.
[   84.577301][ T7367] netlink: 'syz.2.435': attribute type 5 has an invalid length.
[   84.664074][ T7377] tipc: Started in network mode
[   84.665952][ T7377] tipc: Node identity ac1414aa, cluster identity 4711
[   84.673032][ T7377] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   85.001083][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.183624][ T7428] __nla_validate_parse: 143 callbacks suppressed
[   85.183636][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'.
[   85.189338][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'.
[   85.205782][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'.
[   85.208633][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'.
[   85.267081][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'.
[   85.270828][ T7432] only policy match revision 0 supported
[   85.270838][ T7432] unable to load match
[   85.430975][ T7437] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.702797][ T7463] netlink: 'syz.0.464': attribute type 2 has an invalid length.
[   87.057721][ T7508] IPv6: NLM_F_REPLACE set, but no existing node found!
[   87.060750][ T7508] batadv_slave_0: entered promiscuous mode
[   87.070757][ T7507] batadv_slave_0: left promiscuous mode
[   87.187703][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'.
[   87.355637][ T7531] netlink: 'syz.1.487': attribute type 10 has an invalid length.
[   87.397013][ T7535] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   87.817627][ T7543] netlink: 'syz.2.489': attribute type 13 has an invalid length.
[   87.820298][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'.
[   87.823906][ T7543] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   88.235594][ T7548] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[   88.303690][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'.
[   88.354646][ T7567] netlink: 448 bytes leftover after parsing attributes in process `syz.1.495'.
[   88.414829][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.417508][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.420129][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.423856][ T7566] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   88.428073][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.430718][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.434487][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.437186][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.440035][ T7572] netlink: 'syz.0.497': attribute type 7 has an invalid length.
[   88.846714][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.504'.
[   89.591751][ T7636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.614626][ T7632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.990317][ T7660] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.008780][ T7660] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   90.102535][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   90.217816][ T5741] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   90.269519][ T7678] __nla_validate_parse: 3 callbacks suppressed
[   90.269532][ T7678] netlink: 72 bytes leftover after parsing attributes in process `syz.2.525'.
[   90.496306][ T7692] netlink: 80 bytes leftover after parsing attributes in process `syz.0.528'.
[   90.530784][ T7697] netlink: 224 bytes leftover after parsing attributes in process `syz.2.529'.
[   90.569040][ T7697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.529'.
[   90.583145][ T7704] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   90.587163][ T7703] netlink: 92 bytes leftover after parsing attributes in process `syz.0.528'.
[   90.769754][ T7718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.531'.
[   90.785430][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'.
[   90.824816][ T7721] vxcan2: entered promiscuous mode
[   90.975667][ T7735] netlink: 156 bytes leftover after parsing attributes in process `syz.0.536'.
[   91.015397][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'.
[   91.257230][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'.
[   91.261995][ T7769] veth1_macvtap: left promiscuous mode
[   91.856562][ T7821] erspan0: entered promiscuous mode
[   91.860086][ T7821] erspan0: left promiscuous mode
[   92.067471][ T7853] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   92.279261][ T7865] syzkaller1: entered promiscuous mode
[   92.281104][ T7865] syzkaller1: entered allmulticast mode
[   93.103551][ T7942] tipc: Cannot configure node identity twice
[   93.147373][ T7945] validate_nla: 35 callbacks suppressed
[   93.147385][ T7945] netlink: 'syz.1.595': attribute type 83 has an invalid length.
[   93.150361][ T7946] netlink: 'syz.1.595': attribute type 83 has an invalid length.
[   93.273850][ T7959] tap0: tun_chr_ioctl cmd 1074025677
[   93.280068][ T7959] tap0: linktype set to 769
[   93.282026][ T7960] tap0: tun_chr_ioctl cmd 1074025677
[   93.283739][ T7960] tap0: linktype set to 769
[   93.287109][ T7959] tap0: tun_chr_ioctl cmd 35108
[   93.304215][ T7964] netlink: 'syz.2.600': attribute type 3 has an invalid length.
[   93.475805][ T7982] netlink: 'syz.0.605': attribute type 39 has an invalid length.
[   93.564152][ T7994] veth0_to_bond: entered allmulticast mode
[   93.620995][ T7998] syzkaller1: entered promiscuous mode
[   93.626156][ T7998] syzkaller1: entered allmulticast mode
[   93.746428][ T8004] tls_set_device_offload: netdev not found
[   94.113254][ T8013] bond_slave_1: entered promiscuous mode
[   94.115108][ T8013] bond_slave_1: entered allmulticast mode
[   95.236706][ T8023] vlan1: entered allmulticast mode
[   95.238872][ T8023] veth0_vlan: entered allmulticast mode
[   95.248126][ T8025] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   95.251832][ T8025] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   96.514373][ T8084] __nla_validate_parse: 18 callbacks suppressed
[   96.514386][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[   96.566767][ T8086] netlink: 'syz.0.637': attribute type 2 has an invalid length.
[   96.581263][ T8086] k*]: entered promiscuous mode
[   96.588811][ T8086] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[   96.591187][ T8086] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[   96.870407][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[   96.949840][ T8110] sctp: [Deprecated]: syz.0.644 (pid 8110) Use of int in max_burst socket option deprecated.
[   96.949840][ T8110] Use struct sctp_assoc_value instead
[   96.960563][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'.
[   97.115490][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[   97.126377][ T8115] netlink: 'syz.0.646': attribute type 11 has an invalid length.
[   97.329630][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'.
[   97.430022][ T8140] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   97.523922][ T8151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'.
[   97.532776][ T8151] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   97.543305][ T8151] netlink: 256 bytes leftover after parsing attributes in process `syz.2.657'.
[   97.702004][ T8171] syzkaller1: entered promiscuous mode
[   97.703882][ T8171] syzkaller1: entered allmulticast mode
[   97.709832][ T8169] netlink: 92 bytes leftover after parsing attributes in process `syz.1.663'.
[   97.906294][ T8178] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[   97.939824][ T8178] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.955661][ T8178] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.958170][ T8178] bond4: (slave vcan2): The slave device specified does not support setting the MAC address
[   97.962308][ T8178] bond4: (slave vcan2): Error -95 calling set_mac_address
[   98.004154][ T8180] gretap1: entered promiscuous mode
[   98.015644][ T8180] macvlan2: entered promiscuous mode
[   98.017741][ T8180] macvlan2: entered allmulticast mode
[   98.096944][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'.
[   98.464421][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'.
[   98.481846][   T54] Bluetooth: hci2: command tx timeout
[   99.445535][ T8228] sock: sock_timestamping_bind_phc: sock not bind to device
[   99.865580][ T8252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.870548][ T8252] syzkaller0: entered promiscuous mode
[   99.874913][ T8252] syzkaller0: entered allmulticast mode
[   99.887203][ T8252] sch_tbf: peakrate 6 is lower than or equals to rate 12672136337270591158 !
[   99.901405][ T8252] tipc: Resetting bearer <eth:syzkaller0>
[   99.908005][ T8251] tipc: Resetting bearer <eth:syzkaller0>
[   99.924539][ T8251] tipc: Disabling bearer <eth:syzkaller0>
[  100.099296][ T8268] vxcan2: entered promiscuous mode
[  100.232900][ T8282] netlink: 'syz.1.694': attribute type 39 has an invalid length.
[  100.446042][ T8307] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  100.886981][ T8338] tun0: tun_chr_ioctl cmd 1074025675
[  100.888708][ T8338] tun0: persist enabled
[  100.890338][ T8338] tun0: tun_chr_ioctl cmd 1074025675
[  100.892671][ T8338] tun0: persist enabled
[  100.902530][ T8338] syzkaller1: entered promiscuous mode
[  100.904411][ T8338] syzkaller1: entered allmulticast mode
[  101.319639][ T8350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.131275][ T8352] delete_channel: no stack
[  102.206909][ T8377] syzkaller1: entered promiscuous mode
[  102.209111][ T8377] syzkaller1: entered allmulticast mode
[  102.477679][ T8402] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  103.126339][ T8409] netlink: 'syz.0.733': attribute type 3 has an invalid length.
[  103.128931][ T8409] __nla_validate_parse: 11 callbacks suppressed
[  103.128942][ T8409] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.733'.
[  103.257930][ T8416] team0: Mode changed to "loadbalance"
[  103.339998][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  103.347562][ T8425] veth1_macvtap: left promiscuous mode
[  103.385785][ T8420] lo speed is unknown, defaulting to 1000
[  103.493101][ T8422] netlink: 52 bytes leftover after parsing attributes in process `syz.0.738'.
[  103.640810][ T8425] bond_slave_1: left promiscuous mode
[  103.644942][ T8425] bond_slave_1: left allmulticast mode
[  103.732299][ T8425] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  103.748446][ T8425] vlan2: left allmulticast mode
[  103.750931][ T8425] erspan0: left allmulticast mode
[  103.762555][ T8425] geneve2: left promiscuous mode
[  103.776528][ T8425] gretap1: left promiscuous mode
[  103.788155][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.791084][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.797631][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.800420][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.813192][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.815998][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.822912][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.825754][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.934060][ T8451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.220846][ T8457] syz.1.748: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  104.229303][ T8457] CPU: 1 UID: 0 PID: 8457 Comm: syz.1.748 Not tainted syzkaller #0 PREEMPT(full) 
[  104.229324][ T8457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.229333][ T8457] Call Trace:
[  104.229354][ T8457]  <TASK>
[  104.229367][ T8457]  dump_stack_lvl+0x189/0x250
[  104.229391][ T8457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.229406][ T8457]  ? __pfx__printk+0x10/0x10
[  104.229423][ T8457]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  104.229439][ T8457]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  104.229454][ T8457]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  104.229470][ T8457]  warn_alloc+0x214/0x310
[  104.229492][ T8457]  ? __pfx_warn_alloc+0x10/0x10
[  104.229516][ T8457]  ? __get_vm_area_node+0x28f/0x300
[  104.229533][ T8457]  ? hash_mac_create+0x332/0xe80
[  104.229553][ T8457]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  104.229610][ T8457]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  104.229666][ T8457]  ? rcu_is_watching+0x15/0xb0
[  104.229682][ T8457]  ? hash_mac_create+0x332/0xe80
[  104.229698][ T8457]  ? hash_mac_create+0x332/0xe80
[  104.229713][ T8457]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  104.229732][ T8457]  ? hash_mac_create+0x332/0xe80
[  104.229750][ T8457]  ? hash_mac_create+0x2d7/0xe80
[  104.229771][ T8457]  hash_mac_create+0x332/0xe80
[  104.229793][ T8457]  ? __nla_parse+0x40/0x60
[  104.229814][ T8457]  ? __pfx_hash_mac_create+0x10/0x10
[  104.229832][ T8457]  ip_set_create+0xa97/0x1940
[  104.229848][ T8457]  ? ip_set_create+0x4a2/0x1940
[  104.229872][ T8457]  ? __pfx_ip_set_create+0x10/0x10
[  104.229915][ T8457]  nfnetlink_rcv_msg+0xb4d/0x1130
[  104.229934][ T8457]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  104.229986][ T8457]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  104.230026][ T8457]  ? __lock_acquire+0xab9/0xd20
[  104.230062][ T8457]  netlink_rcv_skb+0x208/0x470
[  104.230083][ T8457]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  104.230100][ T8457]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.230128][ T8457]  ? bpf_lsm_capable+0x9/0x20
[  104.230145][ T8457]  ? security_capable+0x7e/0x2e0
[  104.230171][ T8457]  nfnetlink_rcv+0x26a/0x2520
[  104.230188][ T8457]  ? is_bpf_text_address+0x26/0x2b0
[  104.230209][ T8457]  ? kernel_text_address+0xa5/0xe0
[  104.230228][ T8457]  ? __kernel_text_address+0xd/0x40
[  104.230245][ T8457]  ? unwind_get_return_address+0x4d/0x90
[  104.230260][ T8457]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  104.230277][ T8457]  ? arch_stack_walk+0xfc/0x150
[  104.230305][ T8457]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  104.230323][ T8457]  ? stack_depot_save_flags+0x40/0x860
[  104.230349][ T8457]  ? __lock_acquire+0xab9/0xd20
[  104.230387][ T8457]  ? __lock_acquire+0xab9/0xd20
[  104.230413][ T8457]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.230437][ T8457]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.230462][ T8457]  netlink_unicast+0x82f/0x9e0
[  104.230486][ T8457]  ? __pfx_netlink_unicast+0x10/0x10
[  104.230505][ T8457]  ? netlink_sendmsg+0x642/0xb30
[  104.230521][ T8457]  ? skb_put+0x11b/0x210
[  104.230535][ T8457]  netlink_sendmsg+0x805/0xb30
[  104.230561][ T8457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.230583][ T8457]  ? aa_sock_msg_perm+0xf1/0x1d0
[  104.230605][ T8457]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  104.230653][ T8457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.230673][ T8457]  __sock_sendmsg+0x21c/0x270
[  104.230694][ T8457]  ____sys_sendmsg+0x505/0x830
[  104.230711][ T8457]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.230732][ T8457]  ? import_iovec+0x74/0xa0
[  104.230750][ T8457]  ___sys_sendmsg+0x21f/0x2a0
[  104.230767][ T8457]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.230807][ T8457]  ? __fget_files+0x2a/0x420
[  104.230826][ T8457]  ? __fget_files+0x3a0/0x420
[  104.230853][ T8457]  __x64_sys_sendmsg+0x19b/0x260
[  104.230869][ T8457]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.230891][ T8457]  ? rcu_is_watching+0x15/0xb0
[  104.230908][ T8457]  ? do_syscall_64+0xbe/0x3b0
[  104.230930][ T8457]  do_syscall_64+0xfa/0x3b0
[  104.230948][ T8457]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.230964][ T8457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.230976][ T8457]  ? exc_page_fault+0x9f/0xf0
[  104.230995][ T8457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.231008][ T8457] RIP: 0033:0x7fde8b38ebe9
[  104.231023][ T8457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.231035][ T8457] RSP: 002b:00007fde8c1f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.231049][ T8457] RAX: ffffffffffffffda RBX: 00007fde8b5b5fa0 RCX: 00007fde8b38ebe9
[  104.231059][ T8457] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000f
[  104.231067][ T8457] RBP: 00007fde8b411e19 R08: 0000000000000000 R09: 0000000000000000
[  104.231075][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.231083][ T8457] R13: 00007fde8b5b6038 R14: 00007fde8b5b5fa0 R15: 00007ffefafae638
[  104.231105][ T8457]  </TASK>
[  104.231112][ T8457] Mem-Info:
[  104.396031][ T8457] active_anon:5036 inactive_anon:0 isolated_anon:0
[  104.396031][ T8457]  active_file:1372 inactive_file:38225 isolated_file:0
[  104.396031][ T8457]  unevictable:1768 dirty:198 writeback:0
[  104.396031][ T8457]  slab_reclaimable:9912 slab_unreclaimable:73859
[  104.396031][ T8457]  mapped:18267 shmem:2469 pagetables:918
[  104.396031][ T8457]  sec_pagetables:0 bounce:0
[  104.396031][ T8457]  kernel_misc_reclaimable:0
[  104.396031][ T8457]  free:266571 free_pcp:23761 free_cma:0
[  104.416591][ T8457] Node 0 active_anon:12404kB inactive_anon:0kB active_file:4280kB inactive_file:130880kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27828kB dirty:456kB writeback:0kB shmem:5116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5804kB pagetables:1596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.427734][ T8457] Node 1 active_anon:7740kB inactive_anon:0kB active_file:1208kB inactive_file:22020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45240kB dirty:336kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5644kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.442000][ T8457] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.455227][ T8457] lowmem_reserve[]: 0 811 811 811 811
[  104.457443][ T8457] Node 0 DMA32 free:208828kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12404kB inactive_anon:0kB active_file:4280kB inactive_file:130880kB unevictable:3536kB writepending:456kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:52796kB local_pcp:38408kB free_cma:0kB
[  104.470712][ T8457] lowmem_reserve[]: 0 0 0 0 0
[  104.474705][ T8457] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.488437][ T8457] lowmem_reserve[]: 0 0 854 854 854
[  104.490144][ T8457] Node 1 Normal free:383480kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7672kB inactive_anon:0kB active_file:1208kB inactive_file:22020kB unevictable:3536kB writepending:336kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42396kB local_pcp:23568kB free_cma:0kB
[  104.500307][ T8457] lowmem_reserve[]: 0 0 0 0 0
[  104.502154][ T8457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  104.506046][ T8457] Node 0 DMA32: 553*4kB (UM) 305*8kB (UME) 393*16kB (UME) 146*32kB (UM) 59*64kB (UME) 44*128kB (UME) 30*256kB (UM) 10*512kB (UM) 11*1024kB (UME) 10*2048kB (UM) 34*4096kB (M) = 208828kB
[  104.512725][ T8457] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  104.518051][ T8457] Node 1 Normal: 574*4kB (UM) 244*8kB (M) 64*16kB (M) 391*32kB (UME) 279*64kB (UM) 123*128kB (UM) 65*256kB (UME) 40*512kB (UM) 26*1024kB (UM) 21*2048kB (UME) 55*4096kB (UM) = 383416kB
[  104.525107][ T8457] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.528395][ T8457] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.531408][ T8457] 42066 total pagecache pages
[  104.533072][ T8457] 0 pages in swap cache
[  104.536372][ T8457] Free swap  = 124996kB
[  104.538421][ T8457] Total swap = 124996kB
[  104.540160][ T8457] 786301 pages RAM
[  104.545863][ T8457] 0 pages HighMem/MovableOnly
[  104.547449][ T8457] 241330 pages reserved
[  104.548840][ T8457] 0 pages cma reserved
[  104.597438][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.750'.
[  104.630448][ T8466] bond0: entered promiscuous mode
[  104.637282][ T8466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.727108][ T8469] syzkaller1: entered promiscuous mode
[  104.729822][ T8469] syzkaller1: entered allmulticast mode
[  105.029531][ T8485] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  105.197505][ T8485] lo speed is unknown, defaulting to 1000
[  105.460894][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'.
[  105.470962][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  105.522642][ T8517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.763'.
[  105.856062][ T8527] erspan0: entered allmulticast mode
[  106.230857][ T8574] IPv6: Can't replace route, no match found
[  106.239681][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'.
[  106.365561][ T8588] vxcan2: entered promiscuous mode
[  106.708900][ T8605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.791'.
[  106.743430][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'.
[  106.779754][ T8615] netlink: 'syz.0.793': attribute type 39 has an invalid length.
[  106.826601][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[  106.930996][ T8629] netlink: 'syz.2.799': attribute type 1 has an invalid length.
[  106.935058][ T8629] netlink: 'syz.2.799': attribute type 4 has an invalid length.
[  106.940274][ T8629] netlink: 'syz.2.799': attribute type 1 has an invalid length.
[  106.943162][ T8629] netlink: 'syz.2.799': attribute type 4 has an invalid length.
[  107.138585][ T8647] svc: failed to register nfsdv3 RPC service (errno 111).
[  107.143696][ T8647] svc: failed to register nfsaclv3 RPC service (errno 111).
[  107.221241][ T8656] tipc: Started in network mode
[  107.223076][   T54] Bluetooth: hci2: link tx timeout
[  107.223695][ T8656] tipc: Node identity 0ea5324b61a, cluster identity 4711
[  107.225936][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.227415][ T8656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.236202][ T8656] syzkaller0: entered promiscuous mode
[  107.238144][ T8656] syzkaller0: entered allmulticast mode
[  107.316189][ T8655] tipc: Resetting bearer <eth:syzkaller0>
[  107.329601][ T8665] ieee802154 phy0 wpan0: encryption failed: -22
[  107.330021][ T8655] tipc: Disabling bearer <eth:syzkaller0>
[  107.523059][ T8682] netlink: 'syz.2.815': attribute type 10 has an invalid length.
[  107.533689][ T8682] team0: Device hsr_slave_0 failed to register rx_handler
[  108.366497][ T8724] netlink: 'syz.0.830': attribute type 178 has an invalid length.
[  108.378294][ T8726] netlink: 'syz.1.831': attribute type 1 has an invalid length.
[  108.397271][ T8729] __nla_validate_parse: 5 callbacks suppressed
[  108.397283][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'.
[  108.405658][ T8726] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.417628][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'.
[  108.429807][ T8726] bond5: (slave gretap2): making interface the new active one
[  108.434830][ T8726] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  108.470848][ T8734] netlink: 'syz.0.833': attribute type 3 has an invalid length.
[  108.474190][ T8734] netlink: 666 bytes leftover after parsing attributes in process `syz.0.833'.
[  109.271988][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  109.335638][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[  109.345080][ T8763] netlink: 10 bytes leftover after parsing attributes in process `syz.0.840'.
[  109.350196][ T8763] netlink: 'syz.0.840': attribute type 39 has an invalid length.
[  109.679561][ T8776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.845'.
[  109.859739][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.851'.
[  109.928420][ T8800] netlink: 1 bytes leftover after parsing attributes in process `syz.2.853'.
[  109.980995][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'.
[  109.993032][ T8804] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  110.084345][ T8814] netlink: 68 bytes leftover after parsing attributes in process `syz.0.858'.
[  110.662147][ T8858] nbd2: detected capacity change from 0 to 549764202496
[  111.327429][   T56] block nbd2: Receive control failed (result -104)
[  111.507540][ T8897] rdma_rxe: rxe_newlink: failed to add lo
[  111.537158][ T8897] bond0: left promiscuous mode
[  111.539337][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.547727][ T8897] 8021q: adding VLAN 0 to HW filter on device team0
[  111.573206][ T8897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.761978][ T8923] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  111.783368][ T8925] validate_nla: 3 callbacks suppressed
[  111.783385][ T8925] netlink: 'syz.0.894': attribute type 1 has an invalid length.
[  111.863713][ T8931] batadv0: entered promiscuous mode
[  111.866302][ T8931] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.869410][ T8931] batadv0: left promiscuous mode
[  112.157275][ T8956] bridge: RTM_NEWNEIGH with invalid ether address
[  112.620129][ T9004] netlink: 'syz.1.918': attribute type 1 has an invalid length.
[  112.910749][ T9027] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  112.913986][ T9027] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  113.346289][ T9059] syzkaller1: entered promiscuous mode
[  113.348060][ T9059] syzkaller1: entered allmulticast mode
[  113.449619][ T9064] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  113.453567][ T9064] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  113.494879][ T9066] ip6gre1: entered promiscuous mode
[  113.658517][ T9061] lo speed is unknown, defaulting to 1000
[  114.004103][ T9093] pim6reg1: entered promiscuous mode
[  114.006044][ T9093] pim6reg1: entered allmulticast mode
[  114.091581][ T9085] lo speed is unknown, defaulting to 1000
[  114.156336][ T9103] __nla_validate_parse: 12 callbacks suppressed
[  114.156349][ T9103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.950'.
[  114.161371][ T9103] netlink: 'syz.0.950': attribute type 1 has an invalid length.
[  114.237070][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'.
[  114.553252][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'.
[  114.631939][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'.
[  114.747406][ T9120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'.
[  114.792397][ T9123] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.955'.
[  114.810835][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'.
[  114.820905][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'.
[  114.825920][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'.
[  114.829059][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'.
[  115.139778][ T9131] netlink: 'syz.1.959': attribute type 1 has an invalid length.
[  115.399102][ T9144] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  115.678363][ T9171] netlink: 'syz.1.968': attribute type 13 has an invalid length.
[  115.681124][ T9171] netlink: 'syz.1.968': attribute type 17 has an invalid length.
[  115.690424][ T9171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.025836][ T9200] netlink: 'syz.0.978': attribute type 1 has an invalid length.
[  116.048928][ T9200] veth5: entered promiscuous mode
[  116.464266][ T9228] tun0: tun_chr_ioctl cmd 1074025672
[  116.467649][ T9228] tun0: ignored: set checksum disabled
[  116.483047][ T9230] geneve2: entered promiscuous mode
[  116.608610][ T9238] syzkaller1: entered promiscuous mode
[  116.610912][ T9238] syzkaller1: entered allmulticast mode
[  116.701063][ T9251] netlink: 'syz.2.996': attribute type 2 has an invalid length.
[  116.714429][ T9251] k*]: entered promiscuous mode
[  116.734153][ T9251] erspan0: left allmulticast mode
[  116.738183][ T9251] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  116.746038][ T9253] sctp: [Deprecated]: syz.1.997 (pid 9253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.746038][ T9253] Use struct sctp_sack_info instead
[  116.751290][ T2212] lo speed is unknown, defaulting to 1000
[  116.759173][ T9251] veth0_to_team: entered promiscuous mode
[  116.762377][ T2212] syz0: Port: 1 Link ACTIVE
[  116.766801][ T9251] veth0_to_team: entered allmulticast mode
[  116.784301][ T2212] lo speed is unknown, defaulting to 1000
[  116.985512][ T9272] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  117.144760][ T9289] netlink: 'syz.0.1011': attribute type 13 has an invalid length.
[  117.147451][ T9289] netlink: 'syz.0.1011': attribute type 17 has an invalid length.
[  117.220867][ T9289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.355823][ T9311] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  117.358619][ T9311] openvswitch: netlink: Duplicate key (type 0).
[  117.366083][ T9313] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001
[  117.903491][ T9353] syzkaller1: entered promiscuous mode
[  117.905426][ T9353] syzkaller1: entered allmulticast mode
[  117.908779][ T9353] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  118.070075][ T9363] netlink: 'syz.1.1037': attribute type 21 has an invalid length.
[  118.075903][ T9363] netlink: 'syz.1.1037': attribute type 5 has an invalid length.
[  118.078780][ T9364] netlink: 'syz.1.1037': attribute type 3 has an invalid length.
[  118.127274][ T9367] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  118.142716][ T9367] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  118.384104][ T9397] syzkaller1: entered promiscuous mode
[  118.385940][ T9397] syzkaller1: entered allmulticast mode
[  118.465111][ T9400] netlink: 'syz.1.1049': attribute type 4 has an invalid length.
[  118.474384][ T9400] netlink: 'syz.1.1049': attribute type 4 has an invalid length.
[  118.486156][ T9387] lo speed is unknown, defaulting to 1000
[  118.536661][ T9402] ==================================================================
[  118.539134][ T9402] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  118.541679][ T9402] Read of size 1 at addr ffff8881067647b0 by task syz.1.1050/9402
[  118.544776][ T9402] 
[  118.546017][ T9402] CPU: 1 UID: 0 PID: 9402 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) 
[  118.546037][ T9402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.546046][ T9402] Call Trace:
[  118.546054][ T9402]  <TASK>
[  118.546061][ T9402]  dump_stack_lvl+0x189/0x250
[  118.546081][ T9402]  ? __kasan_check_byte+0x12/0x40
[  118.546104][ T9402]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.546120][ T9402]  ? lock_release+0x4b/0x3e0
[  118.546143][ T9402]  ? __virt_addr_valid+0x4a5/0x5c0
[  118.546161][ T9402]  print_report+0xca/0x240
[  118.546174][ T9402]  ? xfrm_state_find+0x2cf2/0x5400
[  118.546196][ T9402]  kasan_report+0x118/0x150
[  118.546215][ T9402]  ? xfrm_state_find+0x2cf2/0x5400
[  118.546238][ T9402]  xfrm_state_find+0x2cf2/0x5400
[  118.546258][ T9402]  ? unwind_get_return_address+0x4d/0x90
[  118.546274][ T9402]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  118.546344][ T9402]  ? xfrm_state_find+0x1da/0x5400
[  118.546369][ T9402]  ? __pfx_xfrm_state_find+0x10/0x10
[  118.546398][ T9402]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  118.546423][ T9402]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  118.546442][ T9402]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  118.546460][ T9402]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  118.546479][ T9402]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  118.546495][ T9402]  ? __lock_acquire+0xab9/0xd20
[  118.546529][ T9402]  ? xfrm_expand_policies+0x41f/0x6a0
[  118.546547][ T9402]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  118.546567][ T9402]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  118.546583][ T9402]  ? __pfx_rcuref_put+0x10/0x10
[  118.546604][ T9402]  xfrm_lookup_route+0x3c/0x1c0
[  118.546621][ T9402]  tcp_v4_connect+0x846/0x1a00
[  118.546645][ T9402]  ? 0xffffffff81000000
[  118.546660][ T9402]  ? __pfx_tcp_v4_connect+0x10/0x10
[  118.546682][ T9402]  __inet_stream_connect+0x2ae/0xe80
[  118.546704][ T9402]  ? __pfx___inet_stream_connect+0x10/0x10
[  118.546720][ T9402]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  118.546739][ T9402]  ? __kasan_kmalloc+0x93/0xb0
[  118.546759][ T9402]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  118.546778][ T9402]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  118.546799][ T9402]  tcp_sendmsg_locked+0x4d9b/0x5620
[  118.546818][ T9402]  ? tcp_sendmsg_locked+0x4d1/0x5620
[  118.546842][ T9402]  ? futex_unqueue+0x22/0x240
[  118.546859][ T9402]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  118.546891][ T9402]  ? __lock_acquire+0xab9/0xd20
[  118.546916][ T9402]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  118.546933][ T9402]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.546949][ T9402]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.546968][ T9402]  tcp_sendmsg+0x2f/0x50
[  118.546985][ T9402]  __sock_sendmsg+0x19c/0x270
[  118.547004][ T9402]  __sys_sendto+0x3bd/0x520
[  118.547026][ T9402]  ? __pfx___sys_sendto+0x10/0x10
[  118.547045][ T9402]  ? do_futex+0x333/0x420
[  118.547073][ T9402]  ? __pfx___se_sys_futex+0x10/0x10
[  118.547092][ T9402]  __x64_sys_sendto+0xde/0x100
[  118.547115][ T9402]  do_syscall_64+0xfa/0x3b0
[  118.547134][ T9402]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.547153][ T9402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.547167][ T9402]  ? exc_page_fault+0x9f/0xf0
[  118.547186][ T9402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.547199][ T9402] RIP: 0033:0x7fde8b38ebe9
[  118.547213][ T9402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.547226][ T9402] RSP: 002b:00007fde8c1f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  118.547240][ T9402] RAX: ffffffffffffffda RBX: 00007fde8b5b5fa0 RCX: 00007fde8b38ebe9
[  118.547251][ T9402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  118.547260][ T9402] RBP: 00007fde8b411e19 R08: 0000200000e68000 R09: 0000000000000010
[  118.547269][ T9402] R10: 0000000020040768 R11: 0000000000000246 R12: 0000000000000000
[  118.547276][ T9402] R13: 00007fde8b5b6038 R14: 00007fde8b5b5fa0 R15: 00007ffefafae638
[  118.547321][ T9402]  </TASK>
[  118.547326][ T9402] 
[  118.679205][ T9402] Allocated by task 7567:
[  118.680561][ T9402]  kasan_save_track+0x3e/0x80
[  118.682162][ T9402]  __kasan_slab_alloc+0x6c/0x80
[  118.683731][ T9402]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  118.685525][ T9402]  xfrm_state_alloc+0x24/0x2f0
[  118.687086][ T9402]  __find_acq_core+0x8a7/0x1c00
[  118.688662][ T9402]  xfrm_find_acq+0x78/0xa0
[  118.690122][ T9402]  xfrm_alloc_userspi+0x6b3/0xc90
[  118.691787][ T9402]  xfrm_user_rcv_msg+0x7a3/0xab0
[  118.693406][ T9402]  netlink_rcv_skb+0x208/0x470
[  118.695024][ T9402]  xfrm_netlink_rcv+0x79/0x90
[  118.696653][ T9402]  netlink_unicast+0x82f/0x9e0
[  118.698395][ T9402]  netlink_sendmsg+0x805/0xb30
[  118.700115][ T9402]  __sock_sendmsg+0x21c/0x270
[  118.701606][ T9402]  ____sys_sendmsg+0x505/0x830
[  118.703091][ T9402]  ___sys_sendmsg+0x21f/0x2a0
[  118.704553][ T9402]  __x64_sys_sendmsg+0x19b/0x260
[  118.706080][ T9402]  do_syscall_64+0xfa/0x3b0
[  118.707632][ T9402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.709578][ T9402] 
[  118.710417][ T9402] Freed by task 973:
[  118.711808][ T9402]  kasan_save_track+0x3e/0x80
[  118.713436][ T9402]  kasan_save_free_info+0x46/0x50
[  118.715399][ T9402]  __kasan_slab_free+0x5b/0x80
[  118.717196][ T9402]  kmem_cache_free+0x18f/0x400
[  118.718771][ T9402]  xfrm_state_gc_task+0x52d/0x6b0
[  118.720358][ T9402]  process_scheduled_works+0xae1/0x17b0
[  118.722132][ T9402]  worker_thread+0x8a0/0xda0
[  118.723563][ T9402]  kthread+0x711/0x8a0
[  118.724848][ T9402]  ret_from_fork+0x3fc/0x770
[  118.726287][ T9402]  ret_from_fork_asm+0x1a/0x30
[  118.727751][ T9402] 
[  118.728519][ T9402] The buggy address belongs to the object at ffff888106764480
[  118.728519][ T9402]  which belongs to the cache xfrm_state of size 928
[  118.733307][ T9402] The buggy address is located 816 bytes inside of
[  118.733307][ T9402]  freed 928-byte region [ffff888106764480, ffff888106764820)
[  118.737389][ T9402] 
[  118.738132][ T9402] The buggy address belongs to the physical page:
[  118.740063][ T9402] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106764
[  118.743101][ T9402] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  118.745616][ T9402] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  118.748367][ T9402] page_type: f5(slab)
[  118.749771][ T9402] raw: 057ff00000000040 ffff88801c385640 dead000000000122 0000000000000000
[  118.752936][ T9402] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  118.755500][ T9402] head: 057ff00000000040 ffff88801c385640 dead000000000122 0000000000000000
[  118.758129][ T9402] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  118.760924][ T9402] head: 057ff00000000002 ffffea000419d901 00000000ffffffff 00000000ffffffff
[  118.763635][ T9402] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  118.766278][ T9402] page dumped because: kasan: bad access detected
[  118.768254][ T9402] page_owner tracks the page as allocated
[  118.770131][ T9402] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5973, tgid 5972 (syz.2.20), ts 58832942557, free_ts 58828866967
[  118.776323][ T9402]  post_alloc_hook+0x240/0x2a0
[  118.777821][ T9402]  get_page_from_freelist+0x21e4/0x22c0
[  118.779530][ T9402]  __alloc_frozen_pages_noprof+0x181/0x370
[  118.781758][ T9402]  alloc_pages_mpol+0x232/0x4a0
[  118.783647][ T9402]  allocate_slab+0x8a/0x370
[  118.785393][ T9402]  ___slab_alloc+0xbeb/0x1410
[  118.787004][ T9402]  kmem_cache_alloc_noprof+0x283/0x3c0
[  118.789088][ T9402]  xfrm_state_alloc+0x24/0x2f0
[  118.790902][ T9402]  xfrm_add_sa+0x17d1/0x4070
[  118.792443][ T9402]  xfrm_user_rcv_msg+0x7a3/0xab0
[  118.794252][ T9402]  netlink_rcv_skb+0x208/0x470
[  118.795808][ T9402]  xfrm_netlink_rcv+0x79/0x90
[  118.797531][ T9402]  netlink_unicast+0x82f/0x9e0
[  118.799136][ T9402]  netlink_sendmsg+0x805/0xb30
[  118.800966][ T9402]  __sock_sendmsg+0x21c/0x270
[  118.802749][ T9402]  ____sys_sendmsg+0x505/0x830
[  118.804616][ T9402] page last free pid 5851 tgid 5851 stack trace:
[  118.807087][ T9402]  __free_frozen_pages+0xbc4/0xd30
[  118.808647][ T9402]  __slab_free+0x303/0x3c0
[  118.809983][ T9402]  qlist_free_all+0x97/0x140
[  118.811351][ T9402]  kasan_quarantine_reduce+0x148/0x160
[  118.813115][ T9402]  __kasan_slab_alloc+0x22/0x80
[  118.814666][ T9402]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  118.816693][ T9402]  getname_flags+0xb8/0x540
[  118.818493][ T9402]  __x64_sys_unlink+0x3a/0x50
[  118.820364][ T9402]  do_syscall_64+0xfa/0x3b0
[  118.821940][ T9402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.823853][ T9402] 
[  118.824648][ T9402] Memory state around the buggy address:
[  118.826724][ T9402]  ffff888106764680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.829944][ T9402]  ffff888106764700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.833100][ T9402] >ffff888106764780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.836248][ T9402]                                      ^
[  118.838457][ T9402]  ffff888106764800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  118.841176][ T9402]  ffff888106764880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  118.843756][ T9402] ==================================================================
[  118.851568][ T9402] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  118.853870][ T9402] CPU: 0 UID: 0 PID: 9402 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) 
[  118.856707][ T9402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.859788][ T9402] Call Trace:
[  118.860833][ T9402]  <TASK>
[  118.861798][ T9402]  dump_stack_lvl+0x99/0x250
[  118.863476][ T9402]  ? __asan_memcpy+0x40/0x70
[  118.865130][ T9402]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.866974][ T9402]  ? __pfx__printk+0x10/0x10
[  118.868454][ T9402]  vpanic+0x281/0x750
[  118.869887][ T9402]  ? preempt_schedule+0xae/0xc0
[  118.871554][ T9402]  ? __pfx_vpanic+0x10/0x10
[  118.873157][ T9402]  ? preempt_schedule_common+0x83/0xd0
[  118.874801][ T9402]  ? preempt_schedule+0xae/0xc0
[  118.876308][ T9402]  ? __pfx_preempt_schedule+0x10/0x10
[  118.877914][ T9402]  panic+0xb9/0xc0
[  118.879050][ T9402]  ? __pfx_panic+0x10/0x10
[  118.880425][ T9402]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  118.882210][ T9402]  ? xfrm_state_find+0x2cf2/0x5400
[  118.883820][ T9402]  check_panic_on_warn+0x89/0xb0
[  118.885420][ T9402]  ? xfrm_state_find+0x2cf2/0x5400
[  118.886993][ T9402]  end_report+0x78/0x160
[  118.888342][ T9402]  kasan_report+0x129/0x150
[  118.889753][ T9402]  ? xfrm_state_find+0x2cf2/0x5400
[  118.891342][ T9402]  xfrm_state_find+0x2cf2/0x5400
[  118.892948][ T9402]  ? unwind_get_return_address+0x4d/0x90
[  118.894662][ T9402]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  118.896573][ T9402]  ? xfrm_state_find+0x1da/0x5400
[  118.898152][ T9402]  ? __pfx_xfrm_state_find+0x10/0x10
[  118.899794][ T9402]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  118.901709][ T9402]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  118.903530][ T9402]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  118.905526][ T9402]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  118.907336][ T9402]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  118.909383][ T9402]  ? __lock_acquire+0xab9/0xd20
[  118.911104][ T9402]  ? xfrm_expand_policies+0x41f/0x6a0
[  118.912875][ T9402]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  118.914651][ T9402]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  118.916642][ T9402]  ? __pfx_rcuref_put+0x10/0x10
[  118.918133][ T9402]  xfrm_lookup_route+0x3c/0x1c0
[  118.919577][ T9402]  tcp_v4_connect+0x846/0x1a00
[  118.921048][ T9402]  ? 0xffffffff81000000
[  118.922307][ T9402]  ? __pfx_tcp_v4_connect+0x10/0x10
[  118.923883][ T9402]  __inet_stream_connect+0x2ae/0xe80
[  118.925435][ T9402]  ? __pfx___inet_stream_connect+0x10/0x10
[  118.927345][ T9402]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  118.928966][ T9402]  ? __kasan_kmalloc+0x93/0xb0
[  118.930414][ T9402]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  118.931998][ T9402]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  118.933564][ T9402]  tcp_sendmsg_locked+0x4d9b/0x5620
[  118.935108][ T9402]  ? tcp_sendmsg_locked+0x4d1/0x5620
[  118.936681][ T9402]  ? futex_unqueue+0x22/0x240
[  118.938102][ T9402]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  118.939785][ T9402]  ? __lock_acquire+0xab9/0xd20
[  118.941286][ T9402]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  118.943009][ T9402]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.944679][ T9402]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.946350][ T9402]  tcp_sendmsg+0x2f/0x50
[  118.947657][ T9402]  __sock_sendmsg+0x19c/0x270
[  118.949143][ T9402]  __sys_sendto+0x3bd/0x520
[  118.950558][ T9402]  ? __pfx___sys_sendto+0x10/0x10
[  118.952115][ T9402]  ? do_futex+0x333/0x420
[  118.953470][ T9402]  ? __pfx___se_sys_futex+0x10/0x10
[  118.955088][ T9402]  __x64_sys_sendto+0xde/0x100
[  118.956566][ T9402]  do_syscall_64+0xfa/0x3b0
[  118.957971][ T9402]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.959571][ T9402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.961442][ T9402]  ? exc_page_fault+0x9f/0xf0
[  118.962932][ T9402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.964737][ T9402] RIP: 0033:0x7fde8b38ebe9
[  118.966101][ T9402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.971885][ T9402] RSP: 002b:00007fde8c1f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  118.974611][ T9402] RAX: ffffffffffffffda RBX: 00007fde8b5b5fa0 RCX: 00007fde8b38ebe9
[  118.977130][ T9402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  118.979661][ T9402] RBP: 00007fde8b411e19 R08: 0000200000e68000 R09: 0000000000000010
[  118.982225][ T9402] R10: 0000000020040768 R11: 0000000000000246 R12: 0000000000000000
[  118.984753][ T9402] R13: 00007fde8b5b6038 R14: 00007fde8b5b5fa0 R15: 00007ffefafae638
[  118.987302][ T9402]  </TASK>
[  118.988916][ T9402] Kernel Offset: disabled
[  118.990322][ T9402] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:33:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000ffffffff RCX=322b88cab5e24d00 RDX=0000000000000000
RSI=00000000ffffffff RDI=ffffffff8e139ea0 RBP=00000000ffffffff RSP=ffffc90003faef60
R8 =0000000000000000 R9 =ffffffff822c7dda R10=ffff8881083fa580 R11=ffffffff81ac3910
R12=0000000000000246 R13=ffff8881083f9cc0 R14=ffffffff8e139ea0 R15=0000000000001000
RIP=ffffffff8b794b5d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1bf03e96c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000e68000 CR3=000000011fbe2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fde8b412e53
XMM06=0000000000000000 00007fde8b412e4d XMM07=0000000000000000 00007fde8b412e61
XMM08=0000000000000000 00007fde8b412ee7 XMM09=0000000000000000 00007fde8b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001654 RDI=0000000000001655 RBP=00000000000003f8 RSP=ffffc900044de7d0
R8 =ffff88801f8d0237 R9 =1ffff11003f1a046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98c6 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fde8c1f56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fde8c1f4fc8 CR3=00000000284d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fde8b587498 00007fde8b587470 XMM03=00007fde8b5874a8 00007fde8b5874a0
XMM04=00007fde8c0ed100 00007fde8b587460 XMM05=00007fde8b587478 00007fde8b5874c0
XMM06=00007fde8b5874b8 00007fde8b5874b0 XMM07=00007fde8b5874a8 00007fde8b5874a0
XMM08=0000000000000000 00007fde8b412ee7 XMM09=0000000000000000 00007fde8b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
