last executing test programs:

1.346268986s ago: executing program 0 (id=798):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x40d5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000500)={'gre0\x00', <r5=>0x0, 0x8000, 0x700, 0x80000001, 0x4, {{0x41, 0x4, 0x3, 0x25, 0x104, 0x68, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @remote, {[@timestamp_prespec={0x44, 0x14, 0xf7, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x544f}, {@loopback, 0x4}]}, @cipso={0x86, 0x43, 0x1, [{0x1, 0x11, "c31f9b07fb01b162445b3f6b5799f4"}, {0x0, 0xe, "9d31cc8be95cc629d8ab46e4"}, {0x0, 0x7, "a0e53d8a89"}, {0x0, 0xf, "2fa2e62f9f1a4940bc044289e5"}, {0x6, 0x8, "311abca3355d"}]}, @ra={0x94, 0x4}, @generic={0x89, 0x6, "42d22484"}, @end, @cipso={0x86, 0x42, 0x3, [{0x5, 0x6, "ed225b09"}, {0x5, 0xc, "3145c38b124314da00c7"}, {0x0, 0x10, "dbec7d76aef5dcb203380f742eda"}, {0x5, 0x8, "8593087f4e72"}, {0x0, 0x12, "66c008b15a03fa74239d584e8f5e3547"}]}, @timestamp={0x44, 0x24, 0x7f, 0x0, 0x9, [0x4, 0x6e, 0xc810, 0x3, 0x5, 0xe, 0x3, 0xf8]}, @rr={0x7, 0x27, 0x5f, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @remote, @remote, @multicast1, @remote, @remote, @multicast1]}]}}}}})
getsockname$packet(r0, &(0x7f0000000680)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r7=>0x0, 0x8000, 0x80, 0x2, 0xbb, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@generic={0x82, 0x6, "0f5efa00"}, @generic={0x94, 0x2}, @cipso={0x86, 0x37, 0x2, [{0x1, 0x2}, {0x0, 0xc, "427c9634079ea5020d83"}, {0x6, 0xf, "7122c4cc6f451ff5593ac036be"}, {0x5, 0x8, "4ae695af69ed"}, {0x7, 0xc, "41737f4d379263b0a0db"}]}, @generic={0x1, 0x11, "eb4a930d1cd6856195cf05b641d825"}, @end, @noop, @lsrr={0x83, 0xb, 0xba, [@dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000800)={'wg2\x00', <r8=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0x90, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000b40)=<r10=>0x0, &(0x7f0000000b80)=0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c80)={'erspan0\x00', &(0x7f0000000bc0)={'syztnl0\x00', <r11=>0x0, 0x70fb0b4e8d887cf1, 0x7, 0x1, 0x3, {{0x1f, 0x4, 0x2, 0x1b, 0x7c, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, {[@timestamp={0x44, 0x18, 0xd3, 0x0, 0x5, [0x10001, 0x653, 0xfffffffd, 0xb, 0x6c6]}, @end, @timestamp={0x44, 0x18, 0x5e, 0x0, 0x7, [0x9, 0x8, 0x8, 0x9, 0xc]}, @noop, @timestamp={0x44, 0x24, 0xe8, 0x0, 0x5, [0x5, 0x7fffffff, 0x6, 0x7, 0x5, 0x7, 0x9, 0xff]}, @noop, @noop, @timestamp={0x44, 0xc, 0xb7, 0x0, 0x8, [0x8, 0x80000001]}, @ra={0x94, 0x4, 0x1}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r0, 0x58, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d80)={'syztnl2\x00', <r13=>0x0, 0x700, 0x80, 0x7, 0x100, {{0x12, 0x4, 0x1, 0x4, 0x48, 0x64, 0x0, 0xb, 0x4, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x1e, 0x3, [{0x1, 0x10, "9b54e3631a907b5cbf90d041b181"}, {0x8b944dfbf408af71, 0x8, "30b133cf2f87"}]}, @end, @ssrr={0x89, 0x7, 0x31, [@local]}, @timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0x2, [{@multicast2, 0x1}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000e80)={'ip_vti0\x00', &(0x7f0000000e40)={'syztnl2\x00', <r14=>0x0, 0x8000, 0x80, 0x4, 0x7, {{0x6, 0x4, 0x0, 0x16, 0x18, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@end]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x26c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x36ce332f6ae8d73b}, 0x40010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r1, <r15=>0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)=r2}, 0x20)
ioctl$FS_IOC_ENABLE_VERITY(r15, 0x40806685, &(0x7f0000001380)={0x1, 0x1, 0x1000, 0xb3, &(0x7f0000001280)="d24605c0f66b31550c35a24006d260a723c0a50ea819ded55ba38537a811dc82bfc03c139fb5dd2d93fb93a1873c51d6d9f5b13edd22c699d4d9a6783bec2d50814efb34ab66c4f151af1905fd0e2f80dfa3bd6bf1c130ccd27613046f71b101129a8222a882a49d0886acfec0a15c8b070f4abb18c68f9732db1f210c6e7384ce7d6dd74a640a4887837efced12a6821504699a9352ef63e445fc5f19372251f2c10f3c8233f30871e01448b0958f75416104", 0x2, 0x0, &(0x7f0000001340)="abf6"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000014c0)={r2, &(0x7f0000001400)="1f7d930cb81dbdb4b90d37eab275e5cb92e4503440c942919a4596cc3784a424779cd19c3ca2af4d00e84f7b376a92bf0430c1", &(0x7f0000001440)=""/65}, 0x20)
sendto$l2tp6(r2, &(0x7f0000001500)="f517bbb3c4642a249833bda2a47a312715ad6b91b76d65f2f9", 0x19, 0x8000, 0x0, 0x0)
r16 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$TIPC_CMD_ENABLE_BEARER(r16, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x11, 0x400, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c010)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001740)={'erspan0\x00', &(0x7f0000001640)={'ip_vti0\x00', r11, 0x0, 0x1, 0xffffffff, 0x9, {{0x2e, 0x4, 0x1, 0x4, 0xb8, 0x68, 0x0, 0x4, 0x0, 0x0, @local, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0x5b, [@broadcast, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0x2c, 0xf5, 0x1, 0x5, [{@local, 0x28}, {@private=0xa010101, 0x9}, {@rand_addr=0x64010100, 0x7}, {@multicast2, 0x8}, {@multicast2, 0x2}]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x7, 0x12, "22a84bebb85f7656f0f2892ecf6dc26c"}, {0x7, 0x2}, {0x2, 0x2}, {0x2, 0x6, "99084d32"}, {0x0, 0xe, "adbfa2f2bfb2f971dc47afa2"}, {0x5, 0x11, "b9b85401f988a7b19cc299fac1b067"}]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0x8, [0x400]}]}}}}})
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv4_newaddr={0x20, 0x14, 0x10, 0x70bd29, 0x25dfdbfc, {0x2, 0x1f, 0xa1, 0xc8, r7}, [@IFA_FLAGS={0x8, 0x8, 0x500}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000001880), r2)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r18, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r19, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000001)

1.27930311s ago: executing program 0 (id=800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.161270191s ago: executing program 0 (id=801):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4004885)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, 0x0, 0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3ff, 0x4f, &(0x7f0000000700)=""/79, 0x40f00, 0x40, '\x00', r2, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0xd, 0x7, 0x667}, 0x10, 0x294aa, r1, 0x0, &(0x7f0000000780)=[0x1, r0, 0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x7af2}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

1.099442143s ago: executing program 0 (id=802):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x10, 0x4, @multicast2}}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x30}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0xe803, 0x41424344}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

1.018101426s ago: executing program 0 (id=804):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={<r2=>0x0, 0xf5, "be91e2da5e57c65af6a891710cf45054754c703020b3f44bb171131c5937db9f36294268b36a8dda49ffa7c0b84f0cff77f238b650c5cd0123281b0dd047b6af5f2abcd3ed3ad9bbe760a919bcf966af27776c60202feb24cf07fe3345f2a000a3655e24c565d638fb0d64e66f30da65983da70e0c28cce41edb10a1132663bf04ce77ec3bb8c5d8fb1ac0b0d41320e835fe864607d10a3396084af8f0d492853f997ac9372f6f25d115fbbfd9601d74788450ac6708d3a0e29b69f00e04c31ab0083c7c78c3a722618fe4268c82f03631fa413e6d950307f19cbdd7d0ecbae74754edcb6013d835c4abb005f6318a77b478112f1c"}, &(0x7f0000000000)=0xfd)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x91bd293, 0x54}, 0x9c)

580.588249ms ago: executing program 2 (id=813):
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001a000708ab09250009a3", 0xe)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB="6f1b4ee3", @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0008000100000000003d000000000000004500007500000000008490783fffffffac1414aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0e0300050a00000000000000000008d58838068b91000000be184ca80fd34f4f55802499d5f5b8948e4bed5fdb2e2330c89cdc121177c3ca9907d02a64531b314d130d383bb500000000000000"], 0x87)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001a000708ab09250009a3", 0xe) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB="6f1b4ee3", @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0008000100000000003d000000000000004500007500000000008490783fffffffac1414aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0e0300050a00000000000000000008d58838068b91000000be184ca80fd34f4f55802499d5f5b8948e4bed5fdb2e2330c89cdc121177c3ca9907d02a64531b314d130d383bb500000000000000"], 0x87) (async)

579.695302ms ago: executing program 1 (id=814):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0x5, 0x5cec, 0x2, @remote, @loopback, 0x7, 0x7, 0x4, 0x80000000}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x7, &(0x7f0000000640)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffe0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000680)='GPL\x00', 0x66, 0x1000, &(0x7f00000006c0)=""/4096, 0xb7096ef8f0f95915, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001700)={0x1, 0xd, 0x4, 0x10000}, 0x10, 0x16ee8, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001740)=[{0x0, 0x5, 0x10, 0x9}], 0x10, 0x6}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15", 0x9c}], 0x1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d00010000000000000000000400008004"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000240)=0x6, 0x9)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={0xffffffffffffffff, 0x5}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a00)={{0x1}, &(0x7f0000001980), &(0x7f00000019c0)='%pS    \x00'}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x800, 0x140a, 0xffffffffffffffff, 0xc00a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x3}, 0x50)

489.583221ms ago: executing program 1 (id=815):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@none}}}, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', <r4=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@local, @loopback, <r5=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x22, 0xfe, 0x5, 0x3, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x0, 0x60, 0xa4, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x94, 0x80000001, 0x4}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0xec}}, 0x0)
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYRES16=0x0], 0xfd6c)

488.716541ms ago: executing program 2 (id=816):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x5c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$inet(0x2, 0x805, 0x0) (async)
r5 = socket$inet(0x2, 0x805, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @dev}, &(0x7f0000000140)=0xc) (async)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @dev}, &(0x7f0000000140)=0xc)
write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000188ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x4b) (async)
write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000188ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x4b)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000002"], 0x114}], 0x1}, 0x0) (async)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000002"], 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004600001800660000008400002b27a12de1f68bf5e000000101000200"], 0x0) (async)
syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004600001800660000008400002b27a12de1f68bf5e000000101000200"], 0x0)

340.631067ms ago: executing program 2 (id=817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x1, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x44)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x38, r3, 0x1, 0x4070bd26, 0x25dedbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "e1193c3c"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x100)

279.628776ms ago: executing program 1 (id=818):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) (async)
shutdown(r0, 0x1) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x650, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r8}, &(0x7f0000000100)=0x8)

278.712265ms ago: executing program 1 (id=819):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) (async)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={<r2=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x253, @empty, 0xfffefffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @broadcast}}, 0x6, 0x33c1}, &(0x7f0000000300)=0x90) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, &(0x7f0000000180)=0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
unshare(0x6070380)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0xffffffff, @loopback}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000280)=[{r3, 0x480}], 0x1, 0xfffff801) (async)
shutdown(r3, 0x1) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r5 = epoll_create1(0x0)
r6 = socket(0x1, 0x80802, 0x0) (async)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x8000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001})
shutdown(r6, 0x0) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) (rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff0200000000000000000000000000018800000000000000000000000401907800706a0100cc19783ec8bd989fc19dce2b456fe92aeb5c017bb150c74412ab72f106c8258ce0226783d98c0b4a9deaada3ed"], 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44)
listen(r8, 0x100101) (async)
accept(r8, 0x0, 0x0)

277.775009ms ago: executing program 2 (id=820):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @broadcast}, 0x10) (async)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf20) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf20)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2e}, 0x20)
setsockopt$inet_mreqsrc(r1, 0x0, 0x5f, &(0x7f0000000040)={@multicast1, @multicast1, @rand_addr=0x64010101}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$unix(0x1, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180140003000000040020000000010000000000000004000200040001"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x24, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x304}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4091)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000015c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
syz_emit_ethernet(0xfc6, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/4038], 0x0) (async)
syz_emit_ethernet(0xfc6, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/4038], 0x0)

209.865365ms ago: executing program 1 (id=821):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000040)={'dvmrp1\x00', 0xfffc})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0xc040)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

121.206113ms ago: executing program 0 (id=822):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x4884) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, 0x3d)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

61.045692ms ago: executing program 2 (id=823):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac9437a8800000000000000000000000001010014000000000000002900000008000000350000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)

425.528µs ago: executing program 2 (id=824):
r0 = socket$inet6(0xa, 0x8000e, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r0, 0x50) (async, rerun: 64)
listen(r0, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x40040) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x80}, 0x8) (async)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) (async, rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) (rerun: 64)

0s ago: executing program 1 (id=825):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
close(0x3)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x96, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000081001000884700000000000000000000000000000000000000004009007000640000062a230933131347ac141437861a00000003050b2d24d0a1987bbf8cc701095037fbb12c0864830f4cffffffffac141444e00000010000004e234e200421907844a1219701839e8cf946bd761cc54b7c31920b1410927cdd91168cc19b6a3d7c4133111d12f80bf0"], &(0x7f0000000040)={0x1, 0x3, [0x617, 0xe5d, 0xa8e, 0x698]})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000400)={@val, @val={0x1, 0x1, 0x6, 0x10, 0x8, 0x9}, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x1a, 0x4, 0x3, 0x21, 0x68, 0x64, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010106, @multicast2, {[@lsrr={0x83, 0x23, 0x9e, [@loopback, @multicast2, @private=0xa010102, @empty, @private=0xa010101, @loopback, @loopback, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0xf, [{@broadcast, 0x2}, {@multicast1, 0xe}]}, @ssrr={0x89, 0x7, 0x4a, [@broadcast]}, @ssrr={0x89, 0x3, 0xf5}, @rr={0x7, 0xf, 0xf9, [@private=0xa010102, @loopback, @local]}, @end]}}}}}}}, 0x84)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44763' (ED25519) to the list of known hosts.
syzkaller login: [   40.787013][ T5744] cgroup: Unknown subsys name 'net'
[   40.943568][ T5744] cgroup: Unknown subsys name 'cpuset'
[   40.947316][ T5744] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.707388][ T5744] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.804625][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.808165][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.811431][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.811445][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.814533][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.816591][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.820464][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.821764][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.829322][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.832220][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.882494][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.890084][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.893905][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.896597][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.899043][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.080186][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   47.112164][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   47.153252][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   47.253315][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.255700][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.258127][ T5817] bridge_slave_0: entered allmulticast mode
[   47.262092][ T5817] bridge_slave_0: entered promiscuous mode
[   47.269976][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.272464][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.274683][ T5816] bridge_slave_0: entered allmulticast mode
[   47.277459][ T5816] bridge_slave_0: entered promiscuous mode
[   47.280925][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.283123][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.285325][ T5816] bridge_slave_1: entered allmulticast mode
[   47.287946][ T5816] bridge_slave_1: entered promiscuous mode
[   47.291160][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.293433][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.295664][ T5817] bridge_slave_1: entered allmulticast mode
[   47.298364][ T5817] bridge_slave_1: entered promiscuous mode
[   47.333869][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.336174][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.338517][ T5825] bridge_slave_0: entered allmulticast mode
[   47.341411][ T5825] bridge_slave_0: entered promiscuous mode
[   47.345058][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.347288][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.349492][ T5825] bridge_slave_1: entered allmulticast mode
[   47.352304][ T5825] bridge_slave_1: entered promiscuous mode
[   47.380222][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.385182][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.389300][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.408926][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.421232][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.434705][ T5816] team0: Port device team_slave_0 added
[   47.439160][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.451716][ T5816] team0: Port device team_slave_1 added
[   47.454567][ T5817] team0: Port device team_slave_0 added
[   47.465780][ T5817] team0: Port device team_slave_1 added
[   47.491852][ T5825] team0: Port device team_slave_0 added
[   47.511156][ T5825] team0: Port device team_slave_1 added
[   47.513624][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.515752][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.524175][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.528561][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.531427][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.539270][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.558744][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.561122][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.568898][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.572986][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.575136][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.583393][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.587182][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.589302][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.597456][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.602413][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.604546][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.612502][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.677817][ T5817] hsr_slave_0: entered promiscuous mode
[   47.680067][ T5817] hsr_slave_1: entered promiscuous mode
[   47.694051][ T5825] hsr_slave_0: entered promiscuous mode
[   47.696470][ T5825] hsr_slave_1: entered promiscuous mode
[   47.698737][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   47.701294][ T5825] Cannot create hsr debugfs directory
[   47.714926][ T5816] hsr_slave_0: entered promiscuous mode
[   47.717174][ T5816] hsr_slave_1: entered promiscuous mode
[   47.719277][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[   47.721588][ T5816] Cannot create hsr debugfs directory
[   47.938713][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.954157][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.958700][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.969202][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.999095][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.004887][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.010878][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.015715][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.068721][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.074350][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.079088][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.084901][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.173490][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.196678][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.200315][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   48.205101][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.217906][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   48.226858][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.229205][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.239982][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.242293][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.247756][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.249918][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.259815][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.262088][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.279125][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   48.296887][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.299150][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.322098][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.324354][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.333930][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.433866][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.478190][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.518019][ T5816] veth0_vlan: entered promiscuous mode
[   48.531979][ T5817] veth0_vlan: entered promiscuous mode
[   48.535425][ T5816] veth1_vlan: entered promiscuous mode
[   48.547159][ T5817] veth1_vlan: entered promiscuous mode
[   48.554727][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.570272][ T5816] veth0_macvtap: entered promiscuous mode
[   48.576185][ T5816] veth1_macvtap: entered promiscuous mode
[   48.595984][ T5817] veth0_macvtap: entered promiscuous mode
[   48.602182][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.614963][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.617418][ T5817] veth1_macvtap: entered promiscuous mode
[   48.632811][ T5825] veth0_vlan: entered promiscuous mode
[   48.638330][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.647913][ T5825] veth1_vlan: entered promiscuous mode
[   48.651729][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.657166][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.671175][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.676384][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.680281][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.700869][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.703577][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.706359][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.716897][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.756295][ T5825] veth0_macvtap: entered promiscuous mode
[   48.756717][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.760370][ T5825] veth1_macvtap: entered promiscuous mode
[   48.760429][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.791919][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.803692][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.806125][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.806552][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.831165][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.835267][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.837981][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.840397][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.844201][ T5822] Bluetooth: hci0: command tx timeout
[   48.853762][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.857424][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.876791][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.892976][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.900645][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.912579][ T5822] Bluetooth: hci2: command tx timeout
[   48.914513][   T55] Bluetooth: hci1: command tx timeout
[   48.944615][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.957730][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.989002][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.994430][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.996759][ T5885] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   49.012251][ T5885] 8021q: VLANs not supported on syzkaller1
[   49.016797][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   49.029328][ T5885] openvswitch: netlink: Key type 16368 is out of range max 32
[   49.253265][ T5901] batadv_slave_0: entered promiscuous mode
[   49.299617][ T5892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4'.
[   50.252970][ T5891] batadv_slave_0: left promiscuous mode
[   50.379676][ T5913] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   50.910989][ T5822] Bluetooth: hci0: command tx timeout
[   50.963814][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'.
[   50.990934][   T55] Bluetooth: hci1: command tx timeout
[   50.993019][ T5822] Bluetooth: hci2: command tx timeout
[   51.090218][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'.
[   51.564325][ T5962] raw_sendmsg: syz.1.22 forgot to set AF_INET. Fix it!
[   51.808062][ T5967] Zero length message leads to an empty skb
[   52.742372][ T5990] batadv_slave_0: entered promiscuous mode
[   52.756367][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31'.
[   52.969426][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   52.972936][ T6014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.976683][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'.
[   52.991552][   T55] Bluetooth: hci0: command tx timeout
[   53.070818][   T55] Bluetooth: hci1: command tx timeout
[   53.071265][ T5822] Bluetooth: hci2: command tx timeout
[   53.572348][ T5989] batadv_slave_0: left promiscuous mode
[   53.774893][ T6030] bridge0: port 3(macsec0) entered blocking state
[   53.777546][ T6030] bridge0: port 3(macsec0) entered disabled state
[   53.779721][ T6030] macsec0: entered allmulticast mode
[   53.782417][ T6030] veth1_macvtap: entered allmulticast mode
[   53.786063][ T6030] macsec0: entered promiscuous mode
[   53.787824][ T6031] netlink: 12552 bytes leftover after parsing attributes in process `syz.0.42'.
[   53.792543][ T6030] bridge0: port 3(macsec0) entered blocking state
[   53.794638][ T6030] bridge0: port 3(macsec0) entered forwarding state
[   53.798088][ T6031] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.42'.
[   53.800975][ T6031] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.42'.
[   54.135916][ T6038] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   54.142788][ T6037] syzkaller1: entered promiscuous mode
[   54.144627][ T6037] syzkaller1: entered allmulticast mode
[   55.070834][ T5822] Bluetooth: hci0: command tx timeout
[   55.150717][ T5822] Bluetooth: hci2: command tx timeout
[   55.150879][   T55] Bluetooth: hci1: command tx timeout
[   58.369141][ T6084] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.55'.
[   58.372321][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'.
[   58.382010][ T6082] netlink: 180 bytes leftover after parsing attributes in process `syz.2.57'.
[   58.655132][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.157886][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'.
[   59.350203][ T6154] netlink: 48 bytes leftover after parsing attributes in process `syz.0.77'.
[   59.356412][ T6154] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.360493][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'.
[   59.367806][ T6154] netlink: 'syz.0.77': attribute type 10 has an invalid length.
[   59.376009][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.386315][ T6154] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   59.395373][ T6154] netlink: 'syz.0.77': attribute type 10 has an invalid length.
[   59.397807][ T6154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.77'.
[   59.427694][ T6154] batadv0: entered promiscuous mode
[   59.436561][ T6154] batadv0: entered allmulticast mode
[   59.439875][ T6154] bond0: (slave batadv0): Releasing backup interface
[   59.444903][ T6154] bridge0: port 3(batadv0) entered blocking state
[   59.453303][ T6154] bridge0: port 3(batadv0) entered disabled state
[   59.481714][ T6157] batadv_slave_0: entered promiscuous mode
[   59.499513][ T6157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'.
[   59.543577][ T6156] batadv_slave_0: left promiscuous mode
[   59.773691][ T6188] syzkaller1: entered allmulticast mode
[   59.827287][ T6196] netlink: 108 bytes leftover after parsing attributes in process `syz.1.85'.
[   59.830047][ T6196] netlink: 108 bytes leftover after parsing attributes in process `syz.1.85'.
[   59.961784][ T5859] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   59.964697][ T5859] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   61.444381][ T6268] delete_channel: no stack
[   61.555765][ T6275] warning: `syz.1.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.634089][ T6281] lo speed is unknown, defaulting to 1000
[   61.637057][ T6281] lo speed is unknown, defaulting to 1000
[   61.639952][ T6281] lo speed is unknown, defaulting to 1000
[   61.865132][  T790] lo speed is unknown, defaulting to 1000
[   61.868482][ T6281] infiniband syz0: set active
[   61.870160][ T6281] infiniband syz0: added lo
[   61.936839][ T6281] RDS/IB: syz0: added
[   61.938470][ T6281] smc: adding ib device syz0 with port count 1
[   61.940524][ T6281] smc:    ib device syz0 port 1 has pnetid 
[   61.943740][  T790] lo speed is unknown, defaulting to 1000
[   61.952703][ T6281] lo speed is unknown, defaulting to 1000
[   62.185493][ T6281] lo speed is unknown, defaulting to 1000
[   62.252903][ T6309] syzkaller1: entered promiscuous mode
[   62.255200][ T6309] syzkaller1: entered allmulticast mode
[   62.319691][ T6281] lo speed is unknown, defaulting to 1000
[   62.723730][ T6333] lo speed is unknown, defaulting to 1000
[   62.749964][ T6345] IPv6: Can't replace route, no match found
[   62.919236][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.921592][ T6354] IPv6: NLM_F_CREATE should be set when creating new route
[   62.928954][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.931800][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.934723][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.937500][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.942543][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.946245][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.948521][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.959651][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.962705][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.965786][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.968140][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.970487][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.970558][ T6322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.978822][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.981386][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.988413][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.991574][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.994478][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.996911][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.999371][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.007000][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.009376][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.011757][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.014110][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.016518][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.017944][ T6359] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   63.018896][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.025012][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.027363][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.029737][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.032293][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.034583][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.036937][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.039330][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.042525][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.046087][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.048562][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.051987][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.054437][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.056876][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.059347][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.063034][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.065388][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.067828][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.070236][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.073297][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.075634][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.077950][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.080327][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.083970][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.086288][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.088668][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.098811][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.101396][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.108923][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.111538][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.113889][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.116124][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.118356][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.127117][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.129471][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.132988][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.135337][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.137682][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.139961][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.143996][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.555302][ T6380] tipc: Started in network mode
[   63.556850][ T6380] tipc: Node identity 6e5d6bae7e43, cluster identity 4711
[   63.559101][ T6380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.562524][ T6380] syzkaller0: entered promiscuous mode
[   63.564441][ T6380] syzkaller0: entered allmulticast mode
[   63.580166][ T6380] tipc: Resetting bearer <eth:syzkaller0>
[   63.668537][ T6379] tipc: Resetting bearer <eth:syzkaller0>
[   63.687655][ T6379] tipc: Disabling bearer <eth:syzkaller0>
[   64.056305][ T6401] bridge0: port 4(macsec0) entered blocking state
[   64.058391][ T6401] bridge0: port 4(macsec0) entered disabled state
[   64.061022][ T6401] macsec0: entered allmulticast mode
[   64.062693][ T6401] veth1_macvtap: entered allmulticast mode
[   64.067806][ T6401] macsec0: entered promiscuous mode
[   64.070059][ T6401] bridge0: port 4(macsec0) entered blocking state
[   64.072586][ T6401] bridge0: port 4(macsec0) entered forwarding state
[   64.930245][ T6415] lo speed is unknown, defaulting to 1000
[   65.410550][ T6447] sctp: [Deprecated]: syz.1.149 (pid 6447) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.410550][ T6447] Use struct sctp_sack_info instead
[   65.480083][ T6447] __nla_validate_parse: 15 callbacks suppressed
[   65.480094][ T6447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.149'.
[   65.636008][ T6462] syzkaller1: entered promiscuous mode
[   65.638009][ T6462] syzkaller1: entered allmulticast mode
[   65.788379][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   65.978512][ T6490] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000
[   66.201844][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'.
[   66.252076][ T6513] netlink: 120 bytes leftover after parsing attributes in process `syz.1.165'.
[   66.255175][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'.
[   66.257972][ T6513] openvswitch: netlink: Flow actions attr not present in new flow.
[   66.315386][ T6518] netlink: 'syz.2.167': attribute type 83 has an invalid length.
[   66.509133][   T33] audit: type=1107 audit(1754609029.302:2): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''w-y0fa8=H`j"?In)SI(]StbTԤʤ13n'
[   66.974836][ T6568] syz_tun: entered allmulticast mode
[   67.067565][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   67.150824][ T6587] erspan0: entered promiscuous mode
[   67.196063][ T6589] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   67.214111][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   67.222774][ T6587] erspan0: left promiscuous mode
[   67.571906][ T6620] netlink: 'syz.2.198': attribute type 2 has an invalid length.
[   67.664332][ T6622] macsec1: entered allmulticast mode
[   67.666055][ T6622] macsec0: entered allmulticast mode
[   67.667774][ T6622] veth1_macvtap: entered allmulticast mode
[   67.824764][ T6628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'.
[   67.951953][ T6646] batadv_slave_0: entered promiscuous mode
[   67.974694][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.203'.
[   67.982486][ T6645] netlink: 'syz.2.205': attribute type 25 has an invalid length.
[   67.991748][ T6645] netlink: 'syz.2.205': attribute type 1 has an invalid length.
[   67.994836][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.997969][ T6649] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   68.007833][ T6649] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   68.192093][ T6634] batadv_slave_0: left promiscuous mode
[   68.467229][ T6682] netlink: 'syz.2.218': attribute type 3 has an invalid length.
[   68.481008][ T6682] trusted_key: syz.2.218 sent an empty control message without MSG_MORE.
[   68.521490][ T6687] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   68.524610][ T6687] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.219'.
[   68.632818][ T6691] batadv_slave_0: entered promiscuous mode
[   68.772267][ T6690] batadv_slave_0: left promiscuous mode
[   68.946656][ T6709] syzkaller1: entered promiscuous mode
[   68.948594][ T6709] syzkaller1: entered allmulticast mode
[   69.063578][ T6716] lo speed is unknown, defaulting to 1000
[   69.331075][ T6721] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   69.333283][ T6721] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   69.378947][ T6723] nbd: couldn't find device at index 536870912
[   69.782609][ T6731] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   69.787518][  T789] lo speed is unknown, defaulting to 1000
[   70.379718][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.467642][ T6768] openvswitch: netlink: IPv4 tun info is not correct
[   70.526187][ T6771] __nla_validate_parse: 9 callbacks suppressed
[   70.526199][ T6771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.241'.
[   70.534402][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[   70.564139][ T6773] macsec0: left allmulticast mode
[   70.565871][ T6773] veth1_macvtap: left allmulticast mode
[   70.567680][ T6773] macsec0: left promiscuous mode
[   70.569683][ T6773] bridge0: port 4(macsec0) entered disabled state
[   70.574945][ T6773] bridge0: port 3(batadv0) entered disabled state
[   70.578349][ T6773] bridge_slave_1: left allmulticast mode
[   70.580287][ T6773] bridge_slave_1: left promiscuous mode
[   70.583207][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.588460][ T6773] bridge_slave_0: left allmulticast mode
[   70.590118][ T6773] bridge_slave_0: left promiscuous mode
[   70.592032][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.834249][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.836301][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.859387][ T6779] sctp: [Deprecated]: syz.0.243 (pid 6779) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.859387][ T6779] Use struct sctp_sack_info instead
[   71.206186][ T6795] batadv_slave_0: entered promiscuous mode
[   71.224720][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'.
[   71.292818][ T6798] netlink: 'syz.1.246': attribute type 2 has an invalid length.
[   71.303766][ T6798] : entered promiscuous mode
[   71.432049][ T6790] batadv_slave_0: left promiscuous mode
[   71.553714][ T6816] syzkaller1: entered promiscuous mode
[   71.555386][ T6816] syzkaller1: entered allmulticast mode
[   71.759377][ T6836] tipc: Started in network mode
[   71.761229][ T6836] tipc: Node identity 76b15a246377, cluster identity 4711
[   71.765167][ T6836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.773282][ T6836] syzkaller0: entered promiscuous mode
[   71.775095][ T6836] syzkaller0: entered allmulticast mode
[   71.786219][ T6836] sch_fq: defrate 257 ignored.
[   71.791020][ T6836] tipc: Resetting bearer <eth:syzkaller0>
[   71.816970][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'.
[   71.819778][ T6840] netlink: 'syz.2.260': attribute type 7 has an invalid length.
[   71.825374][ T6840] netlink: 'syz.2.260': attribute type 8 has an invalid length.
[   71.827791][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[   71.974341][ T6844] veth0_macvtap: left promiscuous mode
[   71.976331][ T6844] macvtap0: entered allmulticast mode
[   72.409837][ T6859] bridge0: port 3(macsec0) entered disabled state
[   72.412590][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.415428][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.489024][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.497114][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.560269][ T6859] veth1_macvtap: left allmulticast mode
[   72.673786][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.676862][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[   72.677175][ T5882] lo speed is unknown, defaulting to 1000
[   72.681823][ T5882] syz0: Port: 1 Link DOWN
[   72.690085][ T6835] tipc: Disabling bearer <eth:syzkaller0>
[   72.695782][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.698486][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.702056][ T5882] lo speed is unknown, defaulting to 1000
[   72.702124][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.725337][  T789] IPVS: starting estimator thread 0...
[   72.812187][ T6878] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.927096][ T6889] lo speed is unknown, defaulting to 1000
[   74.229561][ T6939] netlink: 4708 bytes leftover after parsing attributes in process `syz.1.285'.
[   74.233277][ T6939] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   74.243378][ T6941] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   74.282276][ T6944] syzkaller1: entered promiscuous mode
[   74.284101][ T6944] syzkaller1: entered allmulticast mode
[   74.475894][ T6956] sctp: [Deprecated]: syz.1.290 (pid 6956) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.475894][ T6956] Use struct sctp_sack_info instead
[   74.736485][ T6989] netlink: 'syz.0.298': attribute type 10 has an invalid length.
[   74.738977][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.298'.
[   74.742002][ T6989] dummy0: entered promiscuous mode
[   74.744786][ T6989] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   74.785718][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'.
[   74.946003][ T7009] Bluetooth: MGMT ver 1.23
[   74.990794][ T7015] netlink: 'syz.0.302': attribute type 13 has an invalid length.
[   75.106069][ T7024] netlink: 156 bytes leftover after parsing attributes in process `syz.0.303'.
[   75.704809][ T7053] batadv_slave_0: entered promiscuous mode
[   75.718852][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.308'.
[   75.783497][ T7046] batadv_slave_0: left promiscuous mode
[   75.828962][ T7061] lo speed is unknown, defaulting to 1000
[   76.057604][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[   76.060225][ T7078] bridge_slave_1: left allmulticast mode
[   76.063278][ T7078] bridge_slave_1: left promiscuous mode
[   76.065309][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.069534][ T7078] bridge_slave_0: left allmulticast mode
[   76.072350][ T7078] bridge_slave_0: left promiscuous mode
[   76.074205][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.177906][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'.
[   77.103491][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   77.106234][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   77.934569][ T7105] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   77.961138][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[   78.029497][ T7145] syzkaller1: entered promiscuous mode
[   78.031474][ T7145] syzkaller1: entered allmulticast mode
[   78.489792][ T7184] openvswitch: netlink: Flow actions attr not present in new flow.
[   78.591280][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'.
[   78.679931][ T7201] sctp: [Deprecated]: syz.2.348 (pid 7201) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.679931][ T7201] Use struct sctp_sack_info instead
[   78.739533][ T7211] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004
[   79.070761][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[   79.615183][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'.
[   79.721782][ T7241] batadv_slave_0: entered promiscuous mode
[   79.738014][ T7237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.356'.
[   79.863179][ T7237] batadv_slave_0: left promiscuous mode
[   79.988431][ T7261] netlink: 'syz.1.363': attribute type 13 has an invalid length.
[   79.992430][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'.
[   79.996344][ T7262] netlink: 'syz.1.363': attribute type 13 has an invalid length.
[   80.608303][ T7306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   80.746741][ T7316] __nla_validate_parse: 5 callbacks suppressed
[   80.746752][ T7316] netlink: 64 bytes leftover after parsing attributes in process `syz.1.383'.
[   80.890479][ T7328] batadv_slave_0: entered promiscuous mode
[   80.908071][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.386'.
[   80.991980][ T7327] batadv_slave_0: left promiscuous mode
[   81.075145][ T7346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.391'.
[   81.075592][   T47] cfg80211: failed to load regulatory.db
[   81.126076][ T7348] openvswitch: netlink: Unknown key attributes 2
[   81.476795][ T7358] syzkaller1: entered allmulticast mode
[   81.542853][ T7361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.397'.
[   81.667839][ T7365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.399'.
[   81.671465][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.399'.
[   82.210758][ T7385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.216110][ T7385] syzkaller0: mtu less than device minimum
[   82.612763][ T7391] lo speed is unknown, defaulting to 1000
[   82.794643][ T7401] batadv_slave_0: entered promiscuous mode
[   82.825471][ T7401] batadv_slave_0: left promiscuous mode
[   82.985202][ T7383] tipc: Disabling bearer <eth:syzkaller0>
[   83.013165][ T7408] netlink: 92 bytes leftover after parsing attributes in process `syz.2.411'.
[   83.014854][ T7384] syz.0.405 (7384) used greatest stack depth: 19064 bytes left
[   83.015954][ T7408] block nbd0: not configured, cannot reconfigure
[   83.218127][ T7415] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_rx_wq": -EINTR
[   83.492702][ T7465] openvswitch: netlink: IPv4 tun info is not correct
[   83.515795][ T7464] netlink: 'syz.1.417': attribute type 2 has an invalid length.
[   83.714025][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[   83.716953][ T7483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'.
[   84.010839][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[   84.825279][ T7523] netlink: 'syz.0.432': attribute type 3 has an invalid length.
[   85.098044][ T7537] lo speed is unknown, defaulting to 1000
[   85.128976][ T7541] batadv_slave_0: entered promiscuous mode
[   85.141678][ T7540] batadv_slave_0: left promiscuous mode
[   85.193198][ T7545] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   85.197995][ T7545] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   86.001125][ T7575] batadv_slave_0: entered promiscuous mode
[   86.005970][ T7566] __nla_validate_parse: 6 callbacks suppressed
[   86.005979][ T7566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'.
[   86.040190][ T7580] netlink: 27 bytes leftover after parsing attributes in process `syz.1.447'.
[   86.059628][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[   86.063958][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[   86.066802][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'.
[   86.077087][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'.
[   86.093345][ T7585] netlink: 'syz.1.449': attribute type 4 has an invalid length.
[   86.094013][ T7565] batadv_slave_0: left promiscuous mode
[   86.226039][ T7604] syzkaller1: entered promiscuous mode
[   86.227836][ T7604] syzkaller1: entered allmulticast mode
[   86.372177][ T7592] netlink: 68 bytes leftover after parsing attributes in process `syz.0.451'.
[   86.649811][ T7652] batadv_slave_0: entered promiscuous mode
[   86.673072][ T7652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.467'.
[   86.809089][ T7664] lo speed is unknown, defaulting to 1000
[   86.861428][ T7651] batadv_slave_0: left promiscuous mode
[   86.947159][ T7673] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[   87.138709][ T7681] tipc: New replicast peer: 255.255.255.255
[   87.147915][ T7681] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.940469][ T7684] netlink: 68 bytes leftover after parsing attributes in process `syz.2.474'.
[   87.974392][ T7686] lo speed is unknown, defaulting to 1000
[   88.027520][ T7691] tipc: Started in network mode
[   88.029090][ T7691] tipc: Node identity 3efb643d28f7, cluster identity 4711
[   88.032085][ T7691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.036501][ T7691] syzkaller0: entered promiscuous mode
[   88.038634][ T7691] syzkaller0: entered allmulticast mode
[   88.186540][ T7703] netlink: 'syz.2.478': attribute type 29 has an invalid length.
[   88.198994][ T7686] tipc: Resetting bearer <eth:syzkaller0>
[   88.209477][ T7686] tipc: Disabling bearer <eth:syzkaller0>
[   88.216871][ T7703] netlink: 'syz.2.478': attribute type 29 has an invalid length.
[   88.263963][   T47] tipc: Node number set to 365320740
[   88.526016][ T7724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.646839][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'.
[   89.572629][ T7750] netlink: 'syz.2.490': attribute type 30 has an invalid length.
[   89.575624][ T7750] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   89.578647][ T7750] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   89.618753][ T7757] sctp: [Deprecated]: syz.0.493 (pid 7757) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.618753][ T7757] Use struct sctp_sack_info instead
[   91.032666][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'.
[   91.411990][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   91.584410][ T7845] netlink: 240 bytes leftover after parsing attributes in process `syz.2.513'.
[   92.185616][ T7853] lo speed is unknown, defaulting to 1000
[   92.332569][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[   92.520329][ T7872] netlink: 'syz.1.525': attribute type 32 has an invalid length.
[   92.555062][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'.
[   92.577500][ T7874] syzkaller1: entered promiscuous mode
[   92.579353][ T7874] syzkaller1: entered allmulticast mode
[   92.664723][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.528'.
[   92.667614][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.528'.
[   92.681589][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.528'.
[   92.686032][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.528'.
[   92.689356][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.528'.
[   96.178582][ T7934] netlink: 'syz.0.541': attribute type 13 has an invalid length.
[   96.180565][ T7935] netlink: 'syz.0.541': attribute type 13 has an invalid length.
[   96.181957][ T7934] netlink: 'syz.0.541': attribute type 17 has an invalid length.
[   96.184976][ T7935] netlink: 'syz.0.541': attribute type 17 has an invalid length.
[   96.233715][ T7934] dummy0: left promiscuous mode
[   96.237039][ T7934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.242732][ T7936] __nla_validate_parse: 30 callbacks suppressed
[   96.242740][ T7936] netlink: 244 bytes leftover after parsing attributes in process `syz.0.541'.
[   96.251837][ T7935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.343066][ T7942] tun0: tun_chr_ioctl cmd 1074025675
[   96.348253][ T7942] tun0: persist enabled
[   96.359469][ T7942] tun0: tun_chr_ioctl cmd 1074025675
[   96.362320][ T7942] tun0: persist enabled
[   96.370573][ T7946] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   96.376276][ T7944] netlink: 180 bytes leftover after parsing attributes in process `syz.2.544'.
[   96.377806][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'.
[   96.534710][ T7953] v: renamed from dummy0 (while UP)
[   96.967118][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'.
[   96.999708][ T7983] bridge_slave_0: invalid flags given to default FDB implementation
[   97.003976][ T7983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   97.060170][ T7987] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   97.596023][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.884880][ T8008] batadv_slave_0: entered promiscuous mode
[   97.899312][ T8002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.562'.
[   98.101822][ T8001] batadv_slave_0: left promiscuous mode
[   98.281000][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'.
[   98.283749][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'.
[   98.529370][ T8047] lo speed is unknown, defaulting to 1000
[   98.736263][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[   99.270887][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   99.287689][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   99.593412][ T8094] lo speed is unknown, defaulting to 1000
[   99.855057][ T8115] lo speed is unknown, defaulting to 1000
[  101.578977][ T8220] delete_channel: no stack
[  101.717710][ T8230] netlink: 'syz.0.609': attribute type 4 has an invalid length.
[  101.720057][ T8230] __nla_validate_parse: 4 callbacks suppressed
[  101.720065][ T8230] netlink: 17 bytes leftover after parsing attributes in process `syz.0.609'.
[  101.720505][ T8229] netlink: 'syz.0.609': attribute type 4 has an invalid length.
[  101.729144][ T8229] netlink: 17 bytes leftover after parsing attributes in process `syz.0.609'.
[  101.829069][ T8236] batadv_slave_0: entered promiscuous mode
[  101.845376][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'.
[  101.848596][ T8236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'.
[  102.024265][ T8250] syzkaller1: entered promiscuous mode
[  102.053746][ T8235] batadv_slave_0: left promiscuous mode
[  102.083765][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'.
[  102.086812][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'.
[  102.141530][ T8270] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3942. macoff=106
[  102.191089][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.289517][ T8277] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.298799][ T8277] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.449747][ T8286] netlink: 3 bytes leftover after parsing attributes in process `syz.1.621'.
[  102.487932][ T8291] veth1_to_hsr: entered promiscuous mode
[  102.489679][ T8291] veth1_to_hsr: entered allmulticast mode
[  102.598368][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'.
[  102.603732][ T8302] IPv6: sit1: Disabled Multicast RS
[  102.605876][ T8302] sit1: entered allmulticast mode
[  102.673061][ T8300] lo speed is unknown, defaulting to 1000
[  102.714977][ T8304] IPv6: Can't replace route, no match found
[  102.724863][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.626'.
[  102.900882][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.038049][ T8329] syzkaller0: entered promiscuous mode
[  103.039729][ T8329] syzkaller0: entered allmulticast mode
[  103.043438][ T8328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.053852][ T8330] tipc: Resetting bearer <eth:syzkaller0>
[  103.064000][ T8330] tipc: Disabling bearer <eth:syzkaller0>
[  103.079832][ T8332] netlink: 240 bytes leftover after parsing attributes in process `syz.0.632'.
[  103.498181][ T8366] bridge_slave_0: entered promiscuous mode
[  103.719744][ T8380] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[  103.723800][ T8380] netlink: 'syz.1.649': attribute type 2 has an invalid length.
[  103.850323][ T8397] lo speed is unknown, defaulting to 1000
[  103.962012][ T8404] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  103.965839][ T8403] lo speed is unknown, defaulting to 1000
[  104.179837][ T8408] sctp: [Deprecated]: syz.1.655 (pid 8408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.179837][ T8408] Use struct sctp_sack_info instead
[  105.796884][ T8462] lo speed is unknown, defaulting to 1000
[  105.876203][ T8470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.036128][ T8482] batadv_slave_0: entered promiscuous mode
[  106.182415][ T8481] batadv_slave_0: left promiscuous mode
[  106.630005][ T8518] syzkaller0: entered promiscuous mode
[  106.632067][ T8518] syzkaller0: entered allmulticast mode
[  106.737403][ T8518] infiniband syz2: set active
[  106.739016][ T8518] infiniband syz2: added syzkaller0
[  106.759340][ T8518] RDS/IB: syz2: added
[  106.760727][ T8518] smc: adding ib device syz2 with port count 1
[  106.762942][ T8518] smc:    ib device syz2 port 1 has pnetid 
[  107.276103][ T8531] __nla_validate_parse: 73 callbacks suppressed
[  107.276114][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  107.448799][ T8536] bridge0: port 1(erspan0) entered blocking state
[  107.451095][ T8536] bridge0: port 1(erspan0) entered disabled state
[  107.453213][ T8536] erspan0: entered allmulticast mode
[  107.455685][ T8536] erspan0: entered promiscuous mode
[  107.479426][ T1090] smc: removing ib device syz2
[  107.487660][ T8536] erspan0: left allmulticast mode
[  107.489238][ T8536] erspan0: left promiscuous mode
[  107.491657][ T8536] bridge0: port 1(erspan0) entered disabled state
[  107.496700][ T5880] syz2: Port: 1 Link DOWN
[  107.931937][ T8556] batadv_slave_0: entered promiscuous mode
[  107.949649][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.695'.
[  108.044848][ T8547] batadv_slave_0: left promiscuous mode
[  108.095156][ T8566] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[  108.114270][ T8566] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.123142][ T8566] vlan2: entered allmulticast mode
[  108.124903][ T8566] veth1: entered allmulticast mode
[  108.129562][ T8566] bond1: (slave vlan2): making interface the new active one
[  108.134169][ T8566] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  108.370842][ T8571] bond0: entered allmulticast mode
[  108.372504][ T8571] bond_slave_0: entered allmulticast mode
[  108.374266][ T8571] bond_slave_1: entered allmulticast mode
[  108.458688][ T8573] lo speed is unknown, defaulting to 1000
[  108.563710][ T8574] lo speed is unknown, defaulting to 1000
[  109.031823][ T8585] syzkaller1: entered promiscuous mode
[  109.033639][ T8585] syzkaller1: entered allmulticast mode
[  109.079736][ T8587] syzkaller1: entered promiscuous mode
[  109.082335][ T8587] syzkaller1: entered allmulticast mode
[  109.534786][ T8620] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  109.768738][ T8649] netlink: 256 bytes leftover after parsing attributes in process `syz.1.716'.
[  109.774986][ T8649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.716'.
[  109.904192][ T8652] sctp: [Deprecated]: syz.2.717 (pid 8652) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.904192][ T8652] Use struct sctp_sack_info instead
[  110.094976][ T8689] lo speed is unknown, defaulting to 1000
[  110.138619][ T8691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.292283][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.2.729'.
[  110.295349][ T8701] unsupported nlmsg_type 40
[  110.448038][ T8710] sctp: [Deprecated]: syz.2.731 (pid 8710) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.448038][ T8710] Use struct sctp_sack_info instead
[  110.534565][ T8714] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc
[  111.250836][  T790] tipc: Node number set to 270429102
[  111.330443][ T8731] tipc: New replicast peer: 255.255.255.255
[  111.334058][ T8731] tipc: Enabled bearer <udp:syz2>, priority 10
[  111.552727][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'.
[  111.576030][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[  111.805470][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[  111.904785][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'.
[  111.907410][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'.
[  112.450705][ T5880] tipc: Node number set to 369910845
[  112.694308][ T8798] batadv_slave_0: entered promiscuous mode
[  112.717463][ T8786] __nla_validate_parse: 3 callbacks suppressed
[  112.717474][ T8786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.754'.
[  112.774717][ T8803] batadv_slave_0: entered promiscuous mode
[  112.786920][ T8797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.757'.
[  112.812854][ T8785] batadv_slave_0: left promiscuous mode
[  112.921792][ T8796] batadv_slave_0: left promiscuous mode
[  112.989623][ T8813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.994133][ T8813] syzkaller0: entered promiscuous mode
[  112.996066][ T8813] syzkaller0: entered allmulticast mode
[  113.010266][ T8813] tipc: Resetting bearer <eth:syzkaller0>
[  113.081750][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.084122][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.087145][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.089560][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.112343][ T8812] tipc: Resetting bearer <eth:syzkaller0>
[  113.121379][ T8812] tipc: Disabling bearer <eth:syzkaller0>
[  113.214482][ T8835] netlink: 156 bytes leftover after parsing attributes in process `syz.2.766'.
[  113.264332][ T8838] bridge0: failed insert local address into bridge forwarding table
[  113.304148][ T8843] lo speed is unknown, defaulting to 1000
[  113.325851][ T8845] netlink: 'syz.2.769': attribute type 13 has an invalid length.
[  114.378615][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'.
[  114.442121][ T8878] netlink: 14 bytes leftover after parsing attributes in process `syz.2.778'.
[  114.504780][ T8878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.509761][ T8878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.514517][ T8878] bond0 (unregistering): Released all slaves
[  114.818829][ T8894] Driver unsupported XDP return value 0 on prog  (id 215) dev N/A, expect packet loss!
[  114.968617][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.788'.
[  115.174941][ T8926] batadv_slave_0: entered promiscuous mode
[  115.198999][ T8920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.793'.
[  115.332772][ T8919] batadv_slave_0: left promiscuous mode
[  115.441793][ T8941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'.
[  115.454266][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.799'.
[  115.457670][ T8941] netlink: 'syz.1.799': attribute type 7 has an invalid length.
[  115.461887][ T8941] netlink: 'syz.1.799': attribute type 8 has an invalid length.
[  115.464773][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  116.145540][ T8991] syzkaller1: entered promiscuous mode
[  116.147258][ T8991] syzkaller1: entered allmulticast mode
[  116.478476][ T9022] sctp: [Deprecated]: syz.1.819 (pid 9022) Use of int in maxseg socket option.
[  116.478476][ T9022] Use struct sctp_assoc_value instead
[  116.745624][ T9048] netlink: 'syz.1.825': attribute type 21 has an invalid length.
[  116.747977][ T9048] netlink: 'syz.1.825': attribute type 4 has an invalid length.
[  116.750213][ T9048] netlink: 'syz.1.825': attribute type 5 has an invalid length.
[  116.756964][ T9048] ==================================================================
[  116.759352][ T9048] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  116.761717][ T9048] Read of size 1 at addr ffff8880292b87b0 by task syz.1.825/9048
[  116.764459][ T9048] 
[  116.765569][ T9048] CPU: 1 UID: 0 PID: 9048 Comm: syz.1.825 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  116.765582][ T9048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.765588][ T9048] Call Trace:
[  116.765593][ T9048]  <TASK>
[  116.765598][ T9048]  dump_stack_lvl+0x189/0x250
[  116.765610][ T9048]  ? __kasan_check_byte+0x12/0x40
[  116.765624][ T9048]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.765632][ T9048]  ? lock_release+0x4b/0x3e0
[  116.765645][ T9048]  ? __virt_addr_valid+0x4a5/0x5c0
[  116.765655][ T9048]  print_report+0xca/0x240
[  116.765666][ T9048]  ? xfrm_state_find+0x2cf2/0x5400
[  116.765673][ T9048]  kasan_report+0x118/0x150
[  116.765685][ T9048]  ? xfrm_state_find+0x2cf2/0x5400
[  116.765693][ T9048]  xfrm_state_find+0x2cf2/0x5400
[  116.765700][ T9048]  ? unwind_get_return_address+0x4d/0x90
[  116.765708][ T9048]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  116.765721][ T9048]  ? xfrm_state_find+0x1da/0x5400
[  116.765729][ T9048]  ? __pfx_xfrm_state_find+0x10/0x10
[  116.765737][ T9048]  ? kasan_save_stack+0x4d/0x60
[  116.765746][ T9048]  ? kasan_save_stack+0x3e/0x60
[  116.765755][ T9048]  ? kasan_record_aux_stack+0xbd/0xd0
[  116.765764][ T9048]  ? ip_route_output_key_hash_rcu+0x18eb/0x23d0
[  116.765773][ T9048]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  116.765781][ T9048]  ? __ip4_datagram_connect+0x8f4/0x1270
[  116.765788][ T9048]  ? __ip6_datagram_connect+0x9f0/0x1150
[  116.765798][ T9048]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  116.765808][ T9048]  ? __x64_sys_connect+0x7a/0x90
[  116.765818][ T9048]  ? do_syscall_64+0xfa/0x3b0
[  116.765830][ T9048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.765839][ T9048]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  116.765855][ T9048]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  116.765865][ T9048]  ? __lock_acquire+0xab9/0xd20
[  116.765878][ T9048]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  116.765890][ T9048]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  116.765899][ T9048]  ? xfrm_expand_policies+0x41f/0x6a0
[  116.765908][ T9048]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  116.765919][ T9048]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  116.765928][ T9048]  ? rcuref_put+0x1b7/0x210
[  116.765937][ T9048]  ? __pfx_rcuref_put+0x10/0x10
[  116.765945][ T9048]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  116.765956][ T9048]  xfrm_lookup_route+0x3c/0x1c0
[  116.765965][ T9048]  __ip4_datagram_connect+0x9a5/0x1270
[  116.765976][ T9048]  __ip6_datagram_connect+0x9f0/0x1150
[  116.765988][ T9048]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  116.765999][ T9048]  ? __local_bh_enable_ip+0x12d/0x1c0
[  116.766010][ T9048]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  116.766023][ T9048]  ip6_datagram_connect_v6_only+0x63/0xa0
[  116.766034][ T9048]  __sys_connect+0x316/0x440
[  116.766046][ T9048]  ? __pfx___sys_connect+0x10/0x10
[  116.766059][ T9048]  ? rcu_is_watching+0x15/0xb0
[  116.766072][ T9048]  __x64_sys_connect+0x7a/0x90
[  116.766083][ T9048]  do_syscall_64+0xfa/0x3b0
[  116.766093][ T9048]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.766103][ T9048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.766111][ T9048]  ? exc_page_fault+0x9f/0xf0
[  116.766122][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.766130][ T9048] RIP: 0033:0x7f60f338ebe9
[  116.766164][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.766172][ T9048] RSP: 002b:00007f60f41e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  116.766182][ T9048] RAX: ffffffffffffffda RBX: 00007f60f35b5fa0 RCX: 00007f60f338ebe9
[  116.766188][ T9048] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008
[  116.766194][ T9048] RBP: 00007f60f3411e19 R08: 0000000000000000 R09: 0000000000000000
[  116.766199][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.766204][ T9048] R13: 00007f60f35b6038 R14: 00007f60f35b5fa0 R15: 00007ffe5f4481e8
[  116.766213][ T9048]  </TASK>
[  116.766216][ T9048] 
[  116.879093][ T9048] Allocated by task 6387:
[  116.880371][ T9048]  kasan_save_track+0x3e/0x80
[  116.881771][ T9048]  __kasan_slab_alloc+0x6c/0x80
[  116.883296][ T9048]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  116.884950][ T9048]  xfrm_state_alloc+0x24/0x2f0
[  116.886389][ T9048]  __find_acq_core+0x8a7/0x1c00
[  116.887809][ T9048]  xfrm_find_acq+0x78/0xa0
[  116.889147][ T9048]  xfrm_alloc_userspi+0x6b3/0xc90
[  116.890698][ T9048]  xfrm_user_rcv_msg+0x7a3/0xab0
[  116.892223][ T9048]  netlink_rcv_skb+0x208/0x470
[  116.893694][ T9048]  xfrm_netlink_rcv+0x79/0x90
[  116.895145][ T9048]  netlink_unicast+0x82f/0x9e0
[  116.896551][ T9048]  netlink_sendmsg+0x805/0xb30
[  116.897946][ T9048]  __sock_sendmsg+0x21c/0x270
[  116.899331][ T9048]  ____sys_sendmsg+0x505/0x830
[  116.900769][ T9048]  ___sys_sendmsg+0x21f/0x2a0
[  116.902209][ T9048]  __x64_sys_sendmsg+0x19b/0x260
[  116.903679][ T9048]  do_syscall_64+0xfa/0x3b0
[  116.905030][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.906779][ T9048] 
[  116.907504][ T9048] Freed by task 790:
[  116.908678][ T9048]  kasan_save_track+0x3e/0x80
[  116.910088][ T9048]  kasan_save_free_info+0x46/0x50
[  116.911566][ T9048]  __kasan_slab_free+0x62/0x70
[  116.912967][ T9048]  kmem_cache_free+0x18f/0x400
[  116.914435][ T9048]  xfrm_state_gc_task+0x518/0x6a0
[  116.915933][ T9048]  process_scheduled_works+0xae1/0x17b0
[  116.917634][ T9048]  worker_thread+0x8a0/0xda0
[  116.919004][ T9048]  kthread+0x711/0x8a0
[  116.920222][ T9048]  ret_from_fork+0x3fc/0x770
[  116.921584][ T9048]  ret_from_fork_asm+0x1a/0x30
[  116.923006][ T9048] 
[  116.923734][ T9048] The buggy address belongs to the object at ffff8880292b8480
[  116.923734][ T9048]  which belongs to the cache xfrm_state of size 928
[  116.927822][ T9048] The buggy address is located 816 bytes inside of
[  116.927822][ T9048]  freed 928-byte region [ffff8880292b8480, ffff8880292b8820)
[  116.931849][ T9048] 
[  116.932558][ T9048] The buggy address belongs to the physical page:
[  116.934403][ T9048] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880292b8900 pfn:0x292b8
[  116.937424][ T9048] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  116.939891][ T9048] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  116.942097][ T9048] page_type: f5(slab)
[  116.943312][ T9048] raw: 00fff00000000040 ffff88801db663c0 dead000000000122 0000000000000000
[  116.945830][ T9048] raw: ffff8880292b8900 00000000800e000b 00000000f5000000 0000000000000000
[  116.948356][ T9048] head: 00fff00000000040 ffff88801db663c0 dead000000000122 0000000000000000
[  116.950887][ T9048] head: ffff8880292b8900 00000000800e000b 00000000f5000000 0000000000000000
[  116.953596][ T9048] head: 00fff00000000002 ffffea0000a4ae01 00000000ffffffff 00000000ffffffff
[  116.956148][ T9048] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  116.958699][ T9048] page dumped because: kasan: bad access detected
[  116.960606][ T9048] page_owner tracks the page as allocated
[  116.962316][ T9048] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6375, tgid 6374 (syz.0.127), ts 63426386826, free_ts 63411787390
[  116.967807][ T9048]  post_alloc_hook+0x240/0x2a0
[  116.969258][ T9048]  get_page_from_freelist+0x21e4/0x22c0
[  116.970960][ T9048]  __alloc_frozen_pages_noprof+0x181/0x370
[  116.972777][ T9048]  alloc_pages_mpol+0x232/0x4a0
[  116.974216][ T9048]  allocate_slab+0x8a/0x3b0
[  116.975593][ T9048]  ___slab_alloc+0xbfc/0x1480
[  116.977013][ T9048]  kmem_cache_alloc_noprof+0x283/0x3c0
[  116.978652][ T9048]  xfrm_state_alloc+0x24/0x2f0
[  116.980112][ T9048]  xfrm_add_sa+0x17d1/0x4070
[  116.981488][ T9048]  xfrm_user_rcv_msg+0x7a3/0xab0
[  116.982932][ T9048]  netlink_rcv_skb+0x208/0x470
[  116.984351][ T9048]  xfrm_netlink_rcv+0x79/0x90
[  116.985721][ T9048]  netlink_unicast+0x82f/0x9e0
[  116.987157][ T9048]  netlink_sendmsg+0x805/0xb30
[  116.988589][ T9048]  __sock_sendmsg+0x21c/0x270
[  116.990023][ T9048]  ____sys_sendmsg+0x505/0x830
[  116.991454][ T9048] page last free pid 6371 tgid 6370 stack trace:
[  116.993321][ T9048]  __free_frozen_pages+0xc71/0xe70
[  116.994864][ T9048]  __folio_put+0x21b/0x2c0
[  116.996200][ T9048]  free_large_kmalloc+0x145/0x200
[  116.997691][ T9048]  device_release+0x9c/0x1c0
[  116.999072][ T9048]  kobject_put+0x22b/0x480
[  117.000445][ T9048]  netdev_run_todo+0xd2e/0xea0
[  117.001852][ T9048]  tun_chr_close+0x13c/0x1c0
[  117.003236][ T9048]  __fput+0x44c/0xa70
[  117.004426][ T9048]  task_work_run+0x1d4/0x260
[  117.005808][ T9048]  do_exit+0x6b5/0x22e0
[  117.007043][ T9048]  do_group_exit+0x21c/0x2d0
[  117.008423][ T9048]  get_signal+0x1286/0x1340
[  117.009751][ T9048]  arch_do_signal_or_restart+0x9a/0x750
[  117.011363][ T9048]  exit_to_user_mode_loop+0x75/0x110
[  117.012905][ T9048]  do_syscall_64+0x2bd/0x3b0
[  117.014328][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.016145][ T9048] 
[  117.016872][ T9048] Memory state around the buggy address:
[  117.018508][ T9048]  ffff8880292b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.020829][ T9048]  ffff8880292b8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.023242][ T9048] >ffff8880292b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.025659][ T9048]                                      ^
[  117.027333][ T9048]  ffff8880292b8800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  117.029648][ T9048]  ffff8880292b8880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  117.031987][ T9048] ==================================================================
[  117.036914][ T9048] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  117.039716][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.1.825 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  117.044167][ T9048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.047982][ T9048] Call Trace:
[  117.049234][ T9048]  <TASK>
[  117.050342][ T9048]  dump_stack_lvl+0x99/0x250
[  117.052067][ T9048]  ? __asan_memcpy+0x40/0x70
[  117.053804][ T9048]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.055745][ T9048]  ? __pfx__printk+0x10/0x10
[  117.057516][ T9048]  panic+0x2db/0x790
[  117.059029][ T9048]  ? __pfx_panic+0x10/0x10
[  117.060786][ T9048]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  117.063132][ T9048]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  117.065478][ T9048]  ? print_memory_metadata+0x314/0x400
[  117.067632][ T9048]  ? xfrm_state_find+0x2cf2/0x5400
[  117.069637][ T9048]  check_panic_on_warn+0x89/0xb0
[  117.071489][ T9048]  ? xfrm_state_find+0x2cf2/0x5400
[  117.073393][ T9048]  end_report+0x78/0x160
[  117.075006][ T9048]  kasan_report+0x129/0x150
[  117.076751][ T9048]  ? xfrm_state_find+0x2cf2/0x5400
[  117.078712][ T9048]  xfrm_state_find+0x2cf2/0x5400
[  117.080574][ T9048]  ? unwind_get_return_address+0x4d/0x90
[  117.082820][ T9048]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  117.085098][ T9048]  ? xfrm_state_find+0x1da/0x5400
[  117.086983][ T9048]  ? __pfx_xfrm_state_find+0x10/0x10
[  117.088987][ T9048]  ? kasan_save_stack+0x4d/0x60
[  117.090824][ T9048]  ? kasan_save_stack+0x3e/0x60
[  117.092643][ T9048]  ? kasan_record_aux_stack+0xbd/0xd0
[  117.094643][ T9048]  ? ip_route_output_key_hash_rcu+0x18eb/0x23d0
[  117.096955][ T9048]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  117.099072][ T9048]  ? __ip4_datagram_connect+0x8f4/0x1270
[  117.101171][ T9048]  ? __ip6_datagram_connect+0x9f0/0x1150
[  117.103351][ T9048]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  117.105586][ T9048]  ? __x64_sys_connect+0x7a/0x90
[  117.107447][ T9048]  ? do_syscall_64+0xfa/0x3b0
[  117.109211][ T9048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.111521][ T9048]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  117.113899][ T9048]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  117.116310][ T9048]  ? __lock_acquire+0xab9/0xd20
[  117.118144][ T9048]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  117.120174][ T9048]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  117.122157][ T9048]  ? xfrm_expand_policies+0x41f/0x6a0
[  117.124095][ T9048]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  117.126088][ T9048]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  117.128335][ T9048]  ? rcuref_put+0x1b7/0x210
[  117.130039][ T9048]  ? __pfx_rcuref_put+0x10/0x10
[  117.131886][ T9048]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  117.133872][ T9048]  xfrm_lookup_route+0x3c/0x1c0
[  117.135688][ T9048]  __ip4_datagram_connect+0x9a5/0x1270
[  117.137699][ T9048]  __ip6_datagram_connect+0x9f0/0x1150
[  117.139706][ T9048]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  117.141855][ T9048]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.143782][ T9048]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.145917][ T9048]  ip6_datagram_connect_v6_only+0x63/0xa0
[  117.148135][ T9048]  __sys_connect+0x316/0x440
[  117.149850][ T9048]  ? __pfx___sys_connect+0x10/0x10
[  117.151768][ T9048]  ? rcu_is_watching+0x15/0xb0
[  117.153587][ T9048]  __x64_sys_connect+0x7a/0x90
[  117.155452][ T9048]  do_syscall_64+0xfa/0x3b0
[  117.157179][ T9048]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.159073][ T9048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.161319][ T9048]  ? exc_page_fault+0x9f/0xf0
[  117.163043][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.165295][ T9048] RIP: 0033:0x7f60f338ebe9
[  117.166940][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.173956][ T9048] RSP: 002b:00007f60f41e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  117.176999][ T9048] RAX: ffffffffffffffda RBX: 00007f60f35b5fa0 RCX: 00007f60f338ebe9
[  117.179895][ T9048] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008
[  117.182815][ T9048] RBP: 00007f60f3411e19 R08: 0000000000000000 R09: 0000000000000000
[  117.185742][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.188694][ T9048] R13: 00007f60f35b6038 R14: 00007f60f35b5fa0 R15: 00007ffe5f4481e8
[  117.191691][ T9048]  </TASK>
[  117.193551][ T9048] Kernel Offset: disabled
[  117.195157][ T9048] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:24:39  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820921fd RBX=0400000000000040 RCX=ffff88812dd13980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90006207890 RSP=ffffc900062075d8
R8 =ffff8881016602ef R9 =1ffff110202cc05d R10=dffffc0000000000 R11=ffffed10202cc05e
R12=ffffea00043e6898 R13=1ffffd400087cd13 R14=ffff888125188100 R15=800000010f9a2007
RIP=ffffffff81bfb5c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558bd9c500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000011640000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 000000000000ffff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015c2 RDI=00000000000015c3 RBP=00000000000003f8 RSP=ffffc900068ded10
R8 =ffff888107110237 R9 =1ffff11020e22046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958ea R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f60f41e06c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c269f5a CR3=0000000113432000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
