last executing test programs:

689.912052ms ago: executing program 2 (id=802):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async, rerun: 64)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x6)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) (async)
r3 = socket(0xa, 0x3, 0x87) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0xff, 0x0, 0x3, 0x1, @mcast2, @private0, 0x7, 0x0, 0xcde}})
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (rerun: 32)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x890b, &(0x7f0000000000)) (async, rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {0x0, 0x400b}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) (rerun: 32)

623.916555ms ago: executing program 2 (id=803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000de80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x874, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "b665b88e1104a9e19e5eeb62"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "66af62fa1c4f5787ced2a60f5a0cbdf2f51624e0b65f857224fa269e95a10501f869b61811cf737c15537216891e8008970af657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a07fe657c8c34d7919d552e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9349e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x720, 0x3, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a028412139aaf9d7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x37, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb9371"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x53, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eecaa84e2e810eddaad2ff0dd"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f182bb00dde2c0eb58ccd8c3c1b2afb8a3b1bf8c5ef325930212d533596061a2af5b88c51ce85186eac014a92c3de7a0627"}]}, {0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c60bcbbe83d695"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '\xf9\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "666a203baf36bab1bb85f4519c122ca289dcd11925e84ab71600a4a601065f8e5f6520aeca7829cdc3a18535ae84b6461d7f69"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8101}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "15a378cb1185ebac10a35259329a0ab752a289c7d2a6e5e0cc48530e10bf3e0b223189dce581ea380c10710dfc044b77c8e059916e3f68a6587f64b35c6d011945ea46a1bbec21497e1773357fb06275454537da85c5bb3968d61c335c600ada03e0696bbbff61a31602dd1eb1822a393da8c3f9231058993738c3ebc2265aa3d3e7dcdc7ed65f54a2d4c7fec67677b5b163e2a3050b68f4c8b505634acfc4f98cea005eb572a6f0a8aab9135fc6b7dc5b84e9d3568a4b9607f99d979239ef9e7049de8f1ab62ba7946b1115c773d7a2e95488e0f0a0f5f5d295085d2647ade57efb432662d39f74c5a480ccb5428b727b73998ddde26a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0xf4, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "53fdf90585b0060c79335fac683e9329c7f427428c0bfb7be57f6b860562a2d59ec73e123aabe53644f33ed1ca7dd8159a7b16aaa0c48204948e71c31f63ef5a4e01f4dbd5d2c9e3939cda61f02d8bfe29cc5958de91790965b4dda79dc4671012815213dd1e67c9d6ad5627635b7598531853ef882773b027a4707e52b1b49737dff1a4d0d83df43a65f520be39d5b64ca88626a09ba5605ab496b6333ef4428ee8601388a7b5680615229f88b17bb648114bef94a0af4ac2187fe6b77164eca334ae32"}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5476e4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xe}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xfff}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x24, 0x6, "3eb45c5a436a8675a6f4475ba5436a923b1f798c9ce8d7f61eecab59ae06a1cc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbe8}, 0x1, 0x0, 0x0, 0x8040}, 0x894)

622.580124ms ago: executing program 2 (id=804):
r0 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x10, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r5, r7}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r9, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044884}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711015000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8)
r11 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r11, &(0x7f0000003600)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000000000000000000070000000144140a31ac1414bb00000007e00000010000008100000011000000000000000000000001"], 0x40}}], 0x1, 0x810)

493.24764ms ago: executing program 2 (id=808):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044004}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendfile(r3, r3, &(0x7f0000000040)=0xf7, 0x7)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
ioctl$SIOCRSSCAUSE(r7, 0x89e1, &(0x7f0000000080)=0x6)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, 0x0, 0x14)
close(r5)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x11000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0)

488.37838ms ago: executing program 2 (id=811):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x2, 0x3}]}]}, 0x13c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

413.441586ms ago: executing program 2 (id=812):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet(0x2b, 0x801, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000580)=""/187, 0xbb}], 0x5, &(0x7f00000006c0)=""/123, 0x7b}, 0x10060)
unshare(0x22020600)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0xfffffffffffffe2b)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
shutdown(r0, 0x1)

303.598188ms ago: executing program 1 (id=820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090)
connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}]}, 0x3c}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x20000004) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x20000004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x7)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)
r5 = socket(0x1, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10)
write(r5, &(0x7f00000000c0)="240000001e005f0214ffffffffff05f9070000000100faffffffffffff0a0000e3825fe4", 0x24) (async)
write(r5, &(0x7f00000000c0)="240000001e005f0214ffffffffff05f9070000000100faffffffffffff0a0000e3825fe4", 0x24)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x28, 0xb, 0x0, 0x0, {0x5}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x1c}}, 0x0)
socket(0x8, 0x3, 0x0) (async)
socket(0x8, 0x3, 0x0)

254.124889ms ago: executing program 1 (id=822):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRESOCT=r0], 0x4c}}, 0xfeff)

247.843035ms ago: executing program 1 (id=825):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmmsg$inet6(r0, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

192.450813ms ago: executing program 1 (id=827):
r0 = socket(0x10, 0x80002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000008}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63d9ed6c25dca2a4dfe04bb60000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x50)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff1, 0x4}, {0x1}, {0xffe0, 0xe}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {0x5, 0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xe, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r5, @ANYBLOB="6bc00221262ea1c2ac3626a3bd6b7265cff1310b8d4d799750b2d04c0a3830ba2d0914a10651efe0b9f76ecd3c62fee86791aecb6f04f30854bb24e49c4c7ce01f13e6b57eb2adba435209e446ae63c58190592f5d2f557fab12d862578f41f36e7d9a2b6c8695cd"], 0x48}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800a0001006d6174636800000020000280080002400000000007000100686c00000b00010068656c70657200000900010073797a30000000000900020073797a320000000014000000090a0103000000000000000005000007140000001100010000000000000000000200000a8e3fd800d36767d82fc0835195f57a37d21732f39ccdcef510b2b3d67189c7"], 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r12 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r12, 0x29, 0x2f, &(0x7f0000000680)="18f71eda65db3bcd3eff43a76bff0204f5fffe00000000fffdff1f2be82d00af000000000074193fb15d78b138fd4fea33301c63396ea88206b439382a473e2590d9f09e481416a5fb719e29057c98de14e81c0148aaed4db5fa38bae8474c7507f972d2fd82c9255adac870373ecdd4676b9d977d45af77b31d9f1ceb8e1f0fd1b954ddd654feb7058f6ace2e6f1c12a1fda03cfc53373c840f0082ed63c5774e24e67570114a6c7862a03f795edf8035d2980233e09056a6d62aa58f6f955ded07139899b0e284e577871ecd23fe90eacbf77f0c63f62d4633f2bbb13d4309000000ff315d73c52d1ba1b04c41", 0xee)
sendmmsg$inet6(r12, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xb, @remote, 0x9}, 0x1c, 0x0}}], 0x1, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)

184.2777ms ago: executing program 1 (id=828):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@enum64={0x1, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x8, 0x1, 0x7}, {0x2, 0x3, 0x2}, {0xd, 0x4, 0xffffffff}]}, @var={0xb, 0x0, 0x0, 0xe, 0x4}, @enum64={0xa, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xe, 0x1, 0x1}, {0xf, 0x6, 0x7fff}, {0xc, 0xe, 0x80000000}]}, @restrict={0x10}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x7}, @var={0x9, 0x0, 0x0, 0xe, 0x2, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f0000000240)=""/85, 0xc5, 0x55, 0x0, 0xd0d0, 0x10000}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r6, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
close(r7) (async)
close(r7)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "000000000000a5c3e0bf000000"}]}, 0x28}}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x4f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x30, '\x00', r3, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x5, 0x0, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001480)=[r6, r8, 0xffffffffffffffff, r10, r12], &(0x7f00000014c0)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0x6, 0x9}, {0x0, 0x3, 0x7, 0x6}, {0x4, 0x2, 0x7, 0x5}], 0x10, 0x6}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x4f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x30, '\x00', r3, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x5, 0x0, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001480)=[r6, r8, 0xffffffffffffffff, r10, r12], &(0x7f00000014c0)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0x6, 0x9}, {0x0, 0x3, 0x7, 0x6}, {0x4, 0x2, 0x7, 0x5}], 0x10, 0x6}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001640)={'wlan0\x00'})

73.454207ms ago: executing program 0 (id=831):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000300)=0xffffffc5)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x2, 0x0, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

73.131274ms ago: executing program 0 (id=832):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRESOCT=r0], 0x4c}}, 0xfffe)

72.782967ms ago: executing program 1 (id=833):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket(0xa, 0x3, 0x3a)
recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x5, 0x4)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r8)
sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r9, 0x6a513da061e1002b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001340)={0x40, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}}, 0x20008080)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4004)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000002c0)=<r15=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x8004)

72.393433ms ago: executing program 0 (id=834):
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0x2, 0x2, 0x1) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async, rerun: 32)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r5], 0x28}}, 0x0)

2.624929ms ago: executing program 0 (id=835):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9201}, @TCA_FLOW_MASK={0x8, 0x6, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404809c}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x188, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x150, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0xd4, 0x9, 0x0, 0x1, [@m_ct={0xa4, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xd}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.256699ms ago: executing program 0 (id=836):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

0s ago: executing program 0 (id=837):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x8000000000000c, &(0x7f0000000080), 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast2}], 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rpcgss_oid_to_mech\x00', r0, 0x0, 0x2}, 0x18)
getsockopt$inet_opts(r1, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="e8001a8048200a8014000700"], 0x15c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0xb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47104' (ED25519) to the list of known hosts.
syzkaller login: [   41.257358][ T5831] cgroup: Unknown subsys name 'net'
[   41.356525][ T5831] cgroup: Unknown subsys name 'cpuset'
[   41.360910][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.530156][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.189435][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.194750][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.197720][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.200102][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.203071][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.205861][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.208728][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.211366][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.214023][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.217432][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.220036][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.223159][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.227428][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.236050][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.238743][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.381882][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   45.398822][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   45.402570][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   45.480479][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.482850][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.485615][ T5850] bridge_slave_0: entered allmulticast mode
[   45.488113][ T5850] bridge_slave_0: entered promiscuous mode
[   45.490773][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.493260][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.496313][ T5854] bridge_slave_0: entered allmulticast mode
[   45.498965][ T5854] bridge_slave_0: entered promiscuous mode
[   45.507815][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.510519][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.512783][ T5850] bridge_slave_1: entered allmulticast mode
[   45.515464][ T5850] bridge_slave_1: entered promiscuous mode
[   45.517687][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.520060][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.522635][ T5854] bridge_slave_1: entered allmulticast mode
[   45.525555][ T5854] bridge_slave_1: entered promiscuous mode
[   45.536478][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.538726][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.541025][ T5858] bridge_slave_0: entered allmulticast mode
[   45.543343][ T5858] bridge_slave_0: entered promiscuous mode
[   45.556866][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.559310][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.561974][ T5858] bridge_slave_1: entered allmulticast mode
[   45.564244][ T5858] bridge_slave_1: entered promiscuous mode
[   45.572118][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.578303][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.587026][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.590907][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.595804][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.608973][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.645623][ T5854] team0: Port device team_slave_0 added
[   45.649171][ T5850] team0: Port device team_slave_0 added
[   45.652272][ T5854] team0: Port device team_slave_1 added
[   45.657531][ T5858] team0: Port device team_slave_0 added
[   45.660952][ T5850] team0: Port device team_slave_1 added
[   45.664131][ T5858] team0: Port device team_slave_1 added
[   45.692890][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.696074][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.707013][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.715752][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.718161][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.726947][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.734891][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.737634][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.747564][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.751580][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.754043][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.763853][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.768262][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.770636][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.779826][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.783696][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.786791][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.798223][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.834445][ T5858] hsr_slave_0: entered promiscuous mode
[   45.837673][ T5858] hsr_slave_1: entered promiscuous mode
[   45.845564][ T5850] hsr_slave_0: entered promiscuous mode
[   45.847874][ T5850] hsr_slave_1: entered promiscuous mode
[   45.850114][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   45.851991][ T5850] Cannot create hsr debugfs directory
[   45.860692][ T5854] hsr_slave_0: entered promiscuous mode
[   45.863286][ T5854] hsr_slave_1: entered promiscuous mode
[   45.866137][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   45.868115][ T5854] Cannot create hsr debugfs directory
[   46.007308][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.012854][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.018819][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.027438][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.055364][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.064319][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.075342][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.081110][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.093139][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.095753][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.098237][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.100790][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.109924][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.119991][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.125980][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.131670][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.153676][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.156314][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.158739][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.161059][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.170856][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.173559][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.176566][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.179171][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.203991][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.215563][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.218754][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.221649][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.226046][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.229086][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.232579][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.246275][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   46.256443][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.259425][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.266935][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.269727][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.278871][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.285799][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.297142][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   46.307929][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   46.310995][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.313337][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.320899][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.323468][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.329801][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.332085][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.337106][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.349486][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.351746][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.426345][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.433268][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.461447][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.465332][ T5858] veth0_vlan: entered promiscuous mode
[   46.471195][ T5854] veth0_vlan: entered promiscuous mode
[   46.477697][ T5858] veth1_vlan: entered promiscuous mode
[   46.481765][ T5854] veth1_vlan: entered promiscuous mode
[   46.501563][ T5850] veth0_vlan: entered promiscuous mode
[   46.506290][ T5858] veth0_macvtap: entered promiscuous mode
[   46.509685][ T5858] veth1_macvtap: entered promiscuous mode
[   46.517435][ T5850] veth1_vlan: entered promiscuous mode
[   46.521725][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.525219][ T5854] veth0_macvtap: entered promiscuous mode
[   46.531654][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.538066][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.541838][ T5712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.547172][ T5712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.550520][ T5854] veth1_macvtap: entered promiscuous mode
[   46.553142][ T5712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.565043][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.567637][ T5850] veth0_macvtap: entered promiscuous mode
[   46.570881][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.582161][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.585729][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.591068][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.595259][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.599025][ T5850] veth1_macvtap: entered promiscuous mode
[   46.620824][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.623988][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.631513][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.642222][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.661903][ T5908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.661935][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.669459][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.674997][ T5908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.681184][ T5908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.685969][ T5908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.711719][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.717838][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.721544][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.749821][ T5922] Zero length message leads to an empty skb
[   46.762699][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.775594][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.780767][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.785656][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.792861][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4'.
[   46.797916][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4'.
[   46.801313][ T5925] netlink: 'syz.2.4': attribute type 20 has an invalid length.
[   46.803192][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.808421][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4'.
[   46.808959][ T5712] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   46.815478][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4'.
[   46.818972][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.819127][ T5925] netlink: 'syz.2.4': attribute type 20 has an invalid length.
[   46.822187][ T5712] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   46.830871][ T5712] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   46.836731][ T5712] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   46.883410][ T5929] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1'.
[   46.926080][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.926704][ T5929] bond0: (slave bond_slave_1): Releasing backup interface
[   46.932704][ T5937] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7'.
[   46.939160][ T5936] netlink: 'syz.2.8': attribute type 22 has an invalid length.
[   46.941962][ T5937] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   46.942946][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   46.947260][ T5937] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   46.961216][ T5929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   46.961836][ T5937] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   46.970658][ T5937] netlink: 'syz.1.7': attribute type 4 has an invalid length.
[   47.001460][ T5936] netlink: 'syz.2.8': attribute type 22 has an invalid length.
[   47.013460][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   47.076214][   T33] audit: type=1107 audit(1755864969.914:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   47.230456][ T5959] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET)
[   47.284734][ T5235] Bluetooth: hci0: command tx timeout
[   47.286749][ T5852] Bluetooth: hci2: command tx timeout
[   47.287560][ T5235] Bluetooth: hci1: command tx timeout
[   47.485605][ T5982] netlink: 'syz.0.25': attribute type 12 has an invalid length.
[   47.489978][ T5982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25'.
[   47.661136][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.690514][ T6006] netlink: 'syz.0.33': attribute type 22 has an invalid length.
[   47.879892][ T6010] infiniband syz1: set active
[   47.881665][ T6010] infiniband syz1: added syz_tun
[   47.899288][ T6010] RDS/IB: syz1: added
[   47.901826][ T6010] smc: adding ib device syz1 with port count 1
[   47.905627][ T6010] smc:    ib device syz1 port 1 has pnetid 
[   48.140692][ T6020] Bluetooth: MGMT ver 1.23
[   48.142608][ T6020] netlink: 'syz.0.37': attribute type 2 has an invalid length.
[   48.376435][ T6043] syzkaller1: entered promiscuous mode
[   48.378392][ T6043] syzkaller1: entered allmulticast mode
[   48.529983][ T6058] netlink: 'syz.2.50': attribute type 30 has an invalid length.
[   48.615112][ T6058] netlink: 'syz.2.50': attribute type 30 has an invalid length.
[   49.278854][ T6052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   49.364726][ T5235] Bluetooth: hci1: command tx timeout
[   49.364772][ T5859] Bluetooth: hci2: command tx timeout
[   49.366643][ T5235] Bluetooth: hci0: command tx timeout
[   49.492218][ T6083] netlink: zone id is out of range
[   49.496511][ T6083] netlink: zone id is out of range
[   49.499033][ T6083] netlink: zone id is out of range
[   49.500804][ T6083] netlink: get zone limit has 8 unknown bytes
[   49.541218][ T6091] vlan2: entered allmulticast mode
[   49.542951][ T6091] team_slave_1: entered allmulticast mode
[   49.576614][ T6091] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   49.608402][ T6100] : entered promiscuous mode
[   50.173059][ T6130] pimreg: entered allmulticast mode
[   50.204804][ T6130] openvswitch: netlink: Tunnel attr 16383 out of range max 16
[   50.252598][ T6134] vcan0: tx drop: invalid da for name 0xfffffffffffffffb
[   50.558215][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.561119][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.661499][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.671013][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.745479][    T9] syz1: Port: 1 Link DOWN
[   50.747492][ T5908] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.750696][ T5908] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.753708][ T5908] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.761089][ T6152] vxcan2: entered promiscuous mode
[   50.765487][ T5908] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.829153][ T6161] NCSI netlink: No device for ifindex 0
[   50.850807][ T6165] pim6reg1: entered promiscuous mode
[   50.853067][ T6165] pim6reg1: entered allmulticast mode
[   50.951218][ T6177] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   50.953634][ T6177] macsec1: entered promiscuous mode
[   50.955845][ T6177] macsec1: entered allmulticast mode
[   50.957793][ T6177] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   50.962083][ T6177] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   50.965962][ T6177] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   50.980404][ T6178] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.983653][ T6178] team0: Port device bond1 added
[   51.237145][ T6190] pim6reg: entered allmulticast mode
[   51.240252][ T6192] pim6reg: left allmulticast mode
[   51.415168][ T6201] k*]: entered promiscuous mode
[   51.431871][ T6201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.439950][ T6202] veth0_to_team: entered promiscuous mode
[   51.442209][ T6202] veth0_to_team: entered allmulticast mode
[   51.444921][ T5852] Bluetooth: hci1: command tx timeout
[   51.444986][ T5859] Bluetooth: hci0: command tx timeout
[   51.455259][ T5859] Bluetooth: hci2: command tx timeout
[   51.502063][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801d29e000: rx timeout, send abort
[   51.505149][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d29e000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[   51.545255][ T6212] syzkaller1: entered promiscuous mode
[   51.547812][ T6212] syzkaller1: entered allmulticast mode
[   51.685528][    C1] Illegal XDP return value 16128 on prog  (id 20) dev team0, expect packet loss!
[   51.782168][ T6241] vti0: entered promiscuous mode
[   51.784618][ T6241] vti0: entered allmulticast mode
[   51.815043][ T6244] __nla_validate_parse: 29 callbacks suppressed
[   51.815058][ T6244] netlink: 14 bytes leftover after parsing attributes in process `syz.2.109'.
[   51.821884][ T6244] hsr_slave_0: left promiscuous mode
[   51.825391][ T6244] hsr_slave_1: left promiscuous mode
[   51.958650][ T6247] netlink: 3 bytes leftover after parsing attributes in process `syz.2.110'.
[   51.963897][ T6247] tipc: Can't bind to reserved service type 2
[   52.116075][ T6258] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.114'.
[   52.148191][ T6265] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.118'.
[   52.153917][ T6270] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.118'.
[   52.250014][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   52.328667][ T6300] validate_nla: 9 callbacks suppressed
[   52.328680][ T6300] netlink: 'syz.0.129': attribute type 10 has an invalid length.
[   52.333769][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'.
[   52.338913][ T6300] dummy0: entered promiscuous mode
[   52.343432][ T6300] dummy0: entered allmulticast mode
[   52.348595][ T1009] IPVS: starting estimator thread 0...
[   52.350054][ T6300] bridge0: port 3(dummy0) entered blocking state
[   52.353943][ T6300] bridge0: port 3(dummy0) entered disabled state
[   52.448801][ T6303] IPVS: using max 134 ests per chain, 321600 per kthread
[   52.454130][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   52.457385][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[   52.764112][ T6368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.139'.
[   53.351857][ T6445] syzkaller1: entered promiscuous mode
[   53.353883][ T6445] syzkaller1: entered allmulticast mode
[   53.535307][ T5852] Bluetooth: hci0: command tx timeout
[   53.536763][ T5235] Bluetooth: hci1: command tx timeout
[   53.537164][ T5859] Bluetooth: hci2: command tx timeout
[   53.562370][ T6459] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   53.742890][ T6489] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   53.750628][ T6489] bond2: entered promiscuous mode
[   53.752564][ T6489] 8021q: adding VLAN 0 to HW filter on device bond2
[   53.761422][ T6489] bond2: (slave bridge2): making interface the new active one
[   53.763987][ T6489] bridge2: entered promiscuous mode
[   53.767873][ T6489] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   53.933258][ T6519] netlink: 'syz.2.167': attribute type 3 has an invalid length.
[   53.974288][ T6523] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[   53.987421][ T6518] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   53.994733][ T6518] netlink: 'syz.0.168': attribute type 2 has an invalid length.
[   54.082794][ T6536] tipc: Started in network mode
[   54.084427][ T6536] tipc: Node identity 0667f46fef2f, cluster identity 4711
[   54.089633][ T6536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.103942][ T6535] tipc: Disabling bearer <eth:syzkaller0>
[   54.177121][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.183543][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.187725][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.193325][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.459150][ T6557] infiniband syz2: set down
[   54.461030][ T6557] infiniband syz2: added bond0
[   54.464933][ T6562] netlink: 'syz.1.182': attribute type 10 has an invalid length.
[   54.470274][ T6562] team0: Failed to send options change via netlink (err -105)
[   54.473079][ T6562] team0: Port device dummy0 added
[   54.478949][ T6557] RDS/IB: syz2: added
[   54.481093][ T6557] smc: adding ib device syz2 with port count 1
[   54.483536][ T6557] smc:    ib device syz2 port 1 has pnetid 
[   55.661517][ T6601] vlan2: entered promiscuous mode
[   55.663347][ T6601] vlan2: entered allmulticast mode
[   55.668485][ T6601] hsr_slave_1: entered allmulticast mode
[   55.803267][ T6621] netlink: 'syz.2.197': attribute type 2 has an invalid length.
[   55.807566][ T6621] netlink: 'syz.2.197': attribute type 9 has an invalid length.
[   55.810084][ T6621] netlink: 'syz.2.197': attribute type 6 has an invalid length.
[   55.965161][ T6642] delete_channel: no stack
[   55.989235][ T6646] bridge_slave_1: left allmulticast mode
[   55.991563][ T6646] bridge_slave_1: left promiscuous mode
[   55.993736][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.998989][ T6646] bridge_slave_0: left allmulticast mode
[   56.001644][ T6646] bridge_slave_0: left promiscuous mode
[   56.003907][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.258875][ T6671] ip6tnl1: entered promiscuous mode
[   56.260648][ T6671] ip6tnl1: entered allmulticast mode
[   56.265666][ T6671] team0: Device ip6tnl1 is of different type
[   56.301351][ T6676] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   56.304578][ T6676] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   56.428683][ T6688] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   56.563662][ T6697] sctp: [Deprecated]: syz.1.226 (pid 6697) Use of struct sctp_assoc_value in delayed_ack socket option.
[   56.563662][ T6697] Use struct sctp_sack_info instead
[   56.594304][ T6707] syzkaller1: entered promiscuous mode
[   56.596434][ T6707] syzkaller1: entered allmulticast mode
[   56.608625][ T6709] 0X: renamed from caif0
[   56.611140][ T6709] 0X: entered allmulticast mode
[   56.613105][ T6709] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   56.627245][   T33] audit: type=1800 audit(1755864979.474:3): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.224" name="cgroup.controllers" dev="tmpfs" ino=489 res=0 errno=0
[   56.718068][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.722571][ T6726] macsec1: entered promiscuous mode
[   56.724336][ T6726] macsec1: entered allmulticast mode
[   56.760417][ T6740] delete_channel: no stack
[   56.828601][ T6750] __nla_validate_parse: 36 callbacks suppressed
[   56.828610][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'.
[   56.902112][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[   56.906663][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.248'.
[   56.938924][ T6768] xt_time: unknown flags 0xf4
[   57.022694][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   57.055296][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   57.058175][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[   57.179057][ T6803] team0 (unregistering): Port device team_slave_0 removed
[   57.184058][ T6803] team0 (unregistering): Port device team_slave_1 removed
[   57.188695][ T6803] team0 (unregistering): Port device dummy0 removed
[   57.241525][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'.
[   57.251088][ T6819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.265'.
[   57.270656][ T6819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.265'.
[   57.279536][ T6819] netlink: 96 bytes leftover after parsing attributes in process `syz.1.265'.
[   57.978937][ T6854] bond0: option use_carrier: invalid value (6)
[   58.054966][ T6862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.056965][ T6864] validate_nla: 7 callbacks suppressed
[   58.056976][ T6864] netlink: 'syz.1.281': attribute type 21 has an invalid length.
[   58.069795][ T6862] syzkaller0: entered promiscuous mode
[   58.071863][ T6862] syzkaller0: entered allmulticast mode
[   58.075291][ T6864] netlink: 'syz.1.281': attribute type 5 has an invalid length.
[   58.079031][ T6864] netlink: 'syz.1.281': attribute type 6 has an invalid length.
[   58.119978][ T6862] tipc: Resetting bearer <eth:syzkaller0>
[   58.122763][ T6862] netlink: 'syz.2.280': attribute type 9 has an invalid length.
[   58.128703][ T6861] tipc: Resetting bearer <eth:syzkaller0>
[   58.133373][ T6861] tipc: Disabling bearer <eth:syzkaller0>
[   58.544344][ T6894] netlink: 'syz.0.290': attribute type 1 has an invalid length.
[   58.554926][ T6894] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   58.559184][ T6894] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   58.562560][ T6894] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   58.681323][ T6905] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   58.684998][ T6904] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   59.269946][ T6951] smc: net device bond0 applied user defined pnetid SYZ2
[   59.327786][ T6957] tipc: Started in network mode
[   59.329735][ T6957] tipc: Node identity 4a75713c9649, cluster identity 4711
[   59.332174][ T6957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.335932][ T6957] tipc: Resetting bearer <eth:syzkaller0>
[   59.338857][ T6956] tipc: Disabling bearer <eth:syzkaller0>
[   59.376609][ T6963] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   59.379410][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.563730][ T6998] raw_sendmsg: syz.2.322 forgot to set AF_INET. Fix it!
[   59.598936][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.608897][ T6995] bond1: (slave bridge4): Enslaving as an active interface with an up link
[   59.646186][ T6995] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[   59.797681][ T7035] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   59.993822][ T7074] tipc: Started in network mode
[   59.996173][ T7074] tipc: Node identity eacb4ec47ad6, cluster identity 4711
[   59.998672][ T7074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.731223][ T7105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.918356][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.922136][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.928558][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.965946][ T1138] tipc: Resetting bearer <eth:syzkaller0>
[   61.104743][ T1009] tipc: Node number set to 2417839812
[   61.873447][ T7193] sctp: [Deprecated]: syz.1.377 (pid 7193) Use of int in max_burst socket option.
[   61.873447][ T7193] Use struct sctp_assoc_value instead
[   61.929882][ T7203] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.963268][ T7205] ksmbd: Unknown IPC event: 8, ignore.
[   61.992206][ T7212] __nla_validate_parse: 30 callbacks suppressed
[   61.992216][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'.
[   62.056319][ T7223] sctp: [Deprecated]: syz.2.388 (pid 7223) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.056319][ T7223] Use struct sctp_sack_info instead
[   62.069143][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[   62.138383][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   62.252746][ T7258] netlink: 'syz.0.395': attribute type 15 has an invalid length.
[   62.269367][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.396'.
[   62.317624][ T7260] netlink: 34 bytes leftover after parsing attributes in process `syz.0.396'.
[   62.771236][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[   62.821223][ T7289] pim6reg: entered allmulticast mode
[   62.823581][ T7289] pim6reg: left allmulticast mode
[   63.129798][ T7297] netlink: 80 bytes leftover after parsing attributes in process `syz.1.406'.
[   63.198245][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[   63.227560][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   63.322659][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.403925][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[   64.477376][ T7371] macvtap1: entered promiscuous mode
[   64.479205][ T7371] ip6gretap0: entered promiscuous mode
[   64.481248][ T7371] macvtap1: entered allmulticast mode
[   64.483152][ T7371] ip6gretap0: entered allmulticast mode
[   64.859803][ T7408] ieee802154 phy0 wpan0: encryption failed: -22
[   65.426830][ T7452] veth1_to_bond: entered allmulticast mode
[   65.430785][ T7453] bond_slave_1: entered promiscuous mode
[   65.446719][ T7452] bond_slave_1: left promiscuous mode
[   65.448872][ T7452] veth1_to_bond: left allmulticast mode
[   65.506471][ T7466] : renamed from bond_slave_0
[   65.627207][ T7475] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   65.630010][ T7475] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   65.636914][ T7477] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   65.643820][ T7475] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   65.660643][ T7481] netlink: 'syz.0.456': attribute type 21 has an invalid length.
[   65.663449][ T7481] netlink: 'syz.0.456': attribute type 22 has an invalid length.
[   65.667585][ T7481] netlink: 'syz.0.456': attribute type 23 has an invalid length.
[   65.670602][ T7481] netlink: 'syz.0.456': attribute type 25 has an invalid length.
[   65.673544][ T7481] netlink: 'syz.0.456': attribute type 26 has an invalid length.
[   66.478907][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.486530][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.596612][ T7508] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   66.603318][ T7508] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   66.618689][ T7508] sctp: [Deprecated]: syz.0.464 (pid 7508) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.618689][ T7508] Use struct sctp_sack_info instead
[   66.716076][ T7519] bond0: entered promiscuous mode
[   66.718969][ T7519] : entered promiscuous mode
[   66.722005][ T7519] bond0: left promiscuous mode
[   66.723620][ T7519] : left promiscuous mode
[   66.747231][ T7522] netlink: 'syz.1.469': attribute type 29 has an invalid length.
[   67.366086][ T7539] wireguard0: entered promiscuous mode
[   67.367983][ T7539] wireguard0: entered allmulticast mode
[   67.697217][ T7554] __nla_validate_parse: 26 callbacks suppressed
[   67.697230][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'.
[   67.737012][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'.
[   68.096586][ T7584] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.487'.
[   68.100518][ T7584] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.487'.
[   68.158832][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'.
[   68.163854][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'.
[   68.205571][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'.
[   68.293650][ T7605] netlink: 'syz.1.495': attribute type 7 has an invalid length.
[   68.298502][ T7605] : entered promiscuous mode
[   68.357306][ T7610] netlink: 'syz.0.497': attribute type 83 has an invalid length.
[   68.732910][ T7645] C: renamed from team_slave_0
[   68.736009][ T7645] netlink: 116 bytes leftover after parsing attributes in process `syz.1.508'.
[   68.739371][ T7645] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   68.796919][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'.
[   68.817609][ T7653] veth0: entered promiscuous mode
[   68.820026][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'.
[   68.829155][ T7652] veth0: left promiscuous mode
[   68.854098][ T7656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.384392][ T7666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.429728][ T7666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.434054][ T7674] ieee802154 phy0 wpan0: encryption failed: -22
[   69.437535][ T7674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.446890][ T7675] geneve3: entered promiscuous mode
[   69.449093][ T7675] geneve3: entered allmulticast mode
[   69.452777][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   69.464782][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   69.487299][ T7666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.492845][ T7666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   69.553566][ T7666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.558098][ T7666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   69.574392][ T5712] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.578533][ T5712] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.582063][ T5712] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.587078][ T5712] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.653067][ T5886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   69.657297][ T5886] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   69.664449][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   69.667528][ T5886] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   69.672033][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   69.677470][ T5886] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   69.683185][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   69.689366][ T5886] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   69.737424][ T7712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.741473][ T7713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.749903][ T7712] macsec0: entered allmulticast mode
[   69.751616][ T7712] dummy0: entered allmulticast mode
[   69.754199][ T7712] dummy0: left allmulticast mode
[   69.916759][ T7722] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   70.742969][ T7749] validate_nla: 5 callbacks suppressed
[   70.742978][ T7756] netlink: 'syz.2.545': attribute type 11 has an invalid length.
[   70.742987][ T7749] netlink: 'syz.2.545': attribute type 11 has an invalid length.
[   70.762167][ T7747] sctp: [Deprecated]: syz.2.545 (pid 7747) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.762167][ T7747] Use struct sctp_sack_info instead
[   70.775858][ T7747] sctp: [Deprecated]: syz.2.545 (pid 7747) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.775858][ T7747] Use struct sctp_sack_info instead
[   70.868700][ T7770] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[   70.873487][ T7777] erspan0: entered promiscuous mode
[   71.105843][ T7829] netlink: 'syz.0.568': attribute type 3 has an invalid length.
[   71.111744][ T7829] netlink: 'syz.0.568': attribute type 3 has an invalid length.
[   71.126615][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.129292][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.226596][ T7849] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   71.255150][ T7855] lo: entered allmulticast mode
[   71.257496][ T7855] lo: left allmulticast mode
[   71.313976][ T7869] openvswitch: netlink: Missing key (keys=40, expected=80)
[   71.352025][ T7872] netlink: 'syz.1.582': attribute type 10 has an invalid length.
[   71.487048][ T7895] ieee802154 phy0 wpan0: encryption failed: -22
[   71.494434][ T7890] netlink: zone id is out of range
[   71.496830][ T7890] netlink: zone id is out of range
[   71.499075][ T7890] netlink: zone id is out of range
[   71.501321][ T7890] netlink: zone id is out of range
[   71.504716][ T7890] netlink: zone id is out of range
[   71.507456][ T7890] netlink: zone id is out of range
[   71.509608][ T7890] netlink: zone id is out of range
[   71.511703][ T7890] netlink: zone id is out of range
[   71.513883][ T7890] netlink: zone id is out of range
[   71.570925][ T5712] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.336596][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.383707][ T7926] Bluetooth: MGMT ver 1.23
[   72.414118][ T7926] block nbd0: Unsupported socket: shutdown callout must be supported.
[   72.469041][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.523825][ T7946] sch_tbf: burst 2 is lower than device lo mtu (14) !
[   72.595673][ T7953] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   72.599684][ T7953] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   72.786569][ T7979] __nla_validate_parse: 42 callbacks suppressed
[   72.786580][ T7979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.603'.
[   72.797662][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'.
[   72.814300][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'.
[   72.831272][ T5908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.834256][ T5908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.849013][ T7983] bond0: entered promiscuous mode
[   72.852766][ T7983] bond_slave_0: entered promiscuous mode
[   72.856935][ T7983] bond_slave_1: entered promiscuous mode
[   72.859609][ T7983] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.862376][ T7983] bridge0: port 3(macvlan2) entered blocking state
[   72.865839][ T7983] bridge0: port 3(macvlan2) entered disabled state
[   72.868200][ T7983] macvlan2: entered allmulticast mode
[   72.870071][ T7983] bond0: entered allmulticast mode
[   72.871826][ T7983] bond_slave_0: entered allmulticast mode
[   72.873828][ T7983] bond_slave_1: entered allmulticast mode
[   72.879842][ T7983] macvlan2: entered promiscuous mode
[   72.882516][ T7983] bridge0: port 3(macvlan2) entered blocking state
[   72.884826][ T7983] bridge0: port 3(macvlan2) entered forwarding state
[   72.887630][ T5908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.931543][ T5908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.965934][ T8003] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[   72.968729][ T8005] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[   72.971345][ T8005] netlink: 1 bytes leftover after parsing attributes in process `syz.1.606'.
[   72.974422][ T8003] netlink: 1 bytes leftover after parsing attributes in process `syz.1.606'.
[   73.115765][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.611'.
[   73.118967][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.611'.
[   73.269703][ T8052] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[   73.273060][ T8052] netlink: 172 bytes leftover after parsing attributes in process `syz.1.616'.
[   73.281495][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'.
[   73.325481][ T8057] netlink: 168 bytes leftover after parsing attributes in process `syz.2.617'.
[   73.639048][ T8116] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[   73.878127][ T8164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.882462][ T8164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.926359][ T8170] geneve3: entered promiscuous mode
[   73.928715][ T8170] geneve3: entered allmulticast mode
[   73.937329][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   73.940352][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   73.943381][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   73.962721][ T8164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.967679][ T8164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.970977][ T8164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   74.035241][ T8164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.039960][ T8164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.044072][ T8164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   74.095106][ T8164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.100574][ T8164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.105482][ T8164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   74.158068][ T5908] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.161793][ T5908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   74.165821][ T5908] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   74.178234][ T5908] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.181931][ T5908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   74.185716][ T5908] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   74.189367][ T5908] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.192939][ T5908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   74.197016][ T5908] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   74.202994][ T5908] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.206656][ T5908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   74.210306][ T5908] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   74.267415][ T8194] syzkaller1: entered promiscuous mode
[   74.269393][ T8194] syzkaller1: entered allmulticast mode
[   74.456594][ T8208] sctp: [Deprecated]: syz.1.663 (pid 8208) Use of int in maxseg socket option.
[   74.456594][ T8208] Use struct sctp_assoc_value instead
[   75.206842][ T8275] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   76.903538][ T8363] nftables ruleset with unbound chain
[   77.007722][ T8372] validate_nla: 3 callbacks suppressed
[   77.007739][ T8372] netlink: 'syz.0.712': attribute type 30 has an invalid length.
[   77.163535][ T8379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   77.167085][ T8379] syzkaller0: entered promiscuous mode
[   77.168901][ T8379] syzkaller0: entered allmulticast mode
[   77.170898][ T8379] tipc: Resetting bearer <eth:syzkaller0>
[   77.229409][ T8379] tipc: New replicast peer: 0.0.0.0
[   77.232251][ T8379] tipc: Enabled bearer <udp:syz2>, priority 10
[   77.234874][ T8379] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   77.606760][ T8415] xfrm1: entered promiscuous mode
[   77.609022][ T8415] xfrm1: entered allmulticast mode
[   78.390315][ T8440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.402826][ T8440] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.484130][ T8444] __nla_validate_parse: 234 callbacks suppressed
[   78.484155][ T8444] netlink: 260 bytes leftover after parsing attributes in process `syz.0.740'.
[   78.679903][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'.
[   78.682868][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'.
[   78.686380][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'.
[   78.689718][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'.
[   79.351144][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'.
[   79.408519][ T8476] netlink: 56 bytes leftover after parsing attributes in process `syz.1.749'.
[   79.414765][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[   79.419609][ T8476] syz.1.749: vmalloc error: size 6000640, failed to allocated page array size 11720, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   79.426020][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.1.749 Not tainted syzkaller #0 PREEMPT(full) 
[   79.426031][ T8476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.426036][ T8476] Call Trace:
[   79.426039][ T8476]  <TASK>
[   79.426043][ T8476]  dump_stack_lvl+0x189/0x250
[   79.426058][ T8476]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.426067][ T8476]  ? __pfx__printk+0x10/0x10
[   79.426076][ T8476]  ? lock_release+0x4b/0x3e0
[   79.426087][ T8476]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.426096][ T8476]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   79.426104][ T8476]  warn_alloc+0x214/0x310
[   79.426116][ T8476]  ? __pfx_warn_alloc+0x10/0x10
[   79.426130][ T8476]  ? __get_vm_area_node+0x28f/0x300
[   79.426144][ T8476]  ? fq_pie_init+0x430/0x840
[   79.426159][ T8476]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   79.426199][ T8476]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   79.426218][ T8476]  ? rcu_is_watching+0x15/0xb0
[   79.426229][ T8476]  ? fq_pie_init+0x430/0x840
[   79.426240][ T8476]  ? fq_pie_init+0x430/0x840
[   79.426248][ T8476]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   79.426260][ T8476]  ? fq_pie_init+0x430/0x840
[   79.426272][ T8476]  ? tcf_block_get+0x67/0xa0
[   79.426287][ T8476]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[   79.426303][ T8476]  fq_pie_init+0x430/0x840
[   79.426312][ T8476]  ? __pfx_fq_pie_init+0x10/0x10
[   79.426320][ T8476]  qdisc_create+0x7ac/0xea0
[   79.426331][ T8476]  tc_modify_qdisc+0x1538/0x20e0
[   79.426348][ T8476]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   79.426365][ T8476]  ? lock_release+0x4b/0x3e0
[   79.426378][ T8476]  ? bpf_lsm_capable+0x9/0x20
[   79.426393][ T8476]  ? security_capable+0x7e/0x2e0
[   79.426411][ T8476]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   79.426423][ T8476]  rtnetlink_rcv_msg+0x77c/0xb70
[   79.426440][ T8476]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   79.426454][ T8476]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   79.426468][ T8476]  ? ref_tracker_free+0x63a/0x7d0
[   79.426484][ T8476]  ? __asan_memcpy+0x40/0x70
[   79.426496][ T8476]  ? __pfx_ref_tracker_free+0x10/0x10
[   79.426512][ T8476]  netlink_rcv_skb+0x208/0x470
[   79.426528][ T8476]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   79.426542][ T8476]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.426562][ T8476]  netlink_unicast+0x82f/0x9e0
[   79.426576][ T8476]  ? __pfx_netlink_unicast+0x10/0x10
[   79.426590][ T8476]  ? netlink_sendmsg+0x642/0xb30
[   79.426605][ T8476]  ? skb_put+0x11b/0x210
[   79.426616][ T8476]  netlink_sendmsg+0x805/0xb30
[   79.426632][ T8476]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.426646][ T8476]  ? futex_unqueue+0x22/0x240
[   79.426658][ T8476]  ? aa_sock_msg_perm+0xf1/0x1d0
[   79.426669][ T8476]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   79.426680][ T8476]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.426695][ T8476]  __sock_sendmsg+0x21c/0x270
[   79.426710][ T8476]  ____sys_sendmsg+0x505/0x830
[   79.426720][ T8476]  ? __pfx_____sys_sendmsg+0x10/0x10
[   79.426728][ T8476]  ? import_iovec+0x74/0xa0
[   79.426737][ T8476]  ___sys_sendmsg+0x21f/0x2a0
[   79.426743][ T8476]  ? __pfx____sys_sendmsg+0x10/0x10
[   79.426751][ T8476]  ? futex_wait+0x285/0x360
[   79.426764][ T8476]  ? __fget_files+0x2a/0x420
[   79.426770][ T8476]  ? __fget_files+0x3a0/0x420
[   79.426777][ T8476]  __x64_sys_sendmsg+0x19b/0x260
[   79.426784][ T8476]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   79.426792][ T8476]  ? rcu_is_watching+0x15/0xb0
[   79.426799][ T8476]  ? rcu_is_watching+0x15/0xb0
[   79.426805][ T8476]  do_syscall_64+0xfa/0x3b0
[   79.426813][ T8476]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.426820][ T8476]  ? exc_page_fault+0x9f/0xf0
[   79.426830][ T8476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.426836][ T8476] RIP: 0033:0x7f7f7598ebe9
[   79.426847][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.426856][ T8476] RSP: 002b:00007f7f76819038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.426868][ T8476] RAX: ffffffffffffffda RBX: 00007f7f75bb5fa0 RCX: 00007f7f7598ebe9
[   79.426875][ T8476] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 000000000000000c
[   79.426882][ T8476] RBP: 00007f7f75a11e19 R08: 0000000000000000 R09: 0000000000000000
[   79.426889][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.426895][ T8476] R13: 00007f7f75bb6038 R14: 00007f7f75bb5fa0 R15: 00007fff2e97a368
[   79.426907][ T8476]  </TASK>
[   79.426912][ T8476] Mem-Info:
[   79.472710][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'.
[   79.473459][ T8476] active_anon:6810 inactive_anon:0 isolated_anon:0
[   79.473459][ T8476]  active_file:1404 inactive_file:38221 isolated_file:0
[   79.473459][ T8476]  unevictable:1768 dirty:10 writeback:0
[   79.473459][ T8476]  slab_reclaimable:10122 slab_unreclaimable:57367
[   79.473459][ T8476]  mapped:18155 shmem:2453 pagetables:1022
[   79.473459][ T8476]  sec_pagetables:0 bounce:0
[   79.473459][ T8476]  kernel_misc_reclaimable:0
[   79.473459][ T8476]  free:285291 free_pcp:24835 free_cma:0
[   79.624818][ T8476] Node 0 active_anon:13144kB inactive_anon:0kB active_file:3096kB inactive_file:14844kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29328kB dirty:40kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4112kB pagetables:1704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.637636][ T8476] Node 1 active_anon:14036kB inactive_anon:0kB active_file:2520kB inactive_file:138040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43216kB dirty:52kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7696kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.650350][ T8476] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.661948][ T8476] lowmem_reserve[]: 0 811 811 811 811
[   79.664287][ T8476] Node 0 DMA32 free:399036kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13144kB inactive_anon:0kB active_file:3096kB inactive_file:14844kB unevictable:3536kB writepending:40kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:50480kB local_pcp:36052kB free_cma:0kB
[   79.677149][ T8476] lowmem_reserve[]: 0 0 0 0 0
[   79.679144][ T8476] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   79.691103][ T8476] lowmem_reserve[]: 0 0 854 854 854
[   79.693359][ T8476] Node 1 Normal free:270036kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14036kB inactive_anon:0kB active_file:2520kB inactive_file:138040kB unevictable:3536kB writepending:52kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46980kB local_pcp:21852kB free_cma:0kB
[   79.706313][ T8476] lowmem_reserve[]: 0 0 0 0 0
[   79.708377][ T8476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   79.713610][ T8476] Node 0 DMA32: 203*4kB (UME) 337*8kB (UME) 276*16kB (UME) 449*32kB (UME) 239*64kB (UM) 90*128kB (UME) 57*256kB (UME) 31*512kB (UM) 18*1024kB (UM) 15*2048kB (UME) 66*4096kB (UM) = 399060kB
[   79.721407][ T8476] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   79.728203][ T8476] Node 1 Normal: 193*4kB (UM) 66*8kB (UME) 100*16kB (UME) 10*32kB (ME) 171*64kB (UME) 91*128kB (UM) 28*256kB (UM) 11*512kB (UME) 2*1024kB (UE) 4*2048kB (UE) 54*4096kB (UM) = 270036kB
[   79.736006][ T8476] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.739857][ T8476] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.743608][ T8476] 42081 total pagecache pages
[   79.745754][ T8476] 0 pages in swap cache
[   79.747461][ T8476] Free swap  = 124996kB
[   79.749159][ T8476] Total swap = 124996kB
[   79.750948][ T8476] 786301 pages RAM
[   79.752551][ T8476] 0 pages HighMem/MovableOnly
[   79.754638][ T8476] 241337 pages reserved
[   79.756334][ T8476] 0 pages cma reserved
[   79.850773][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[   79.888874][ T8496] netlink: 'syz.2.754': attribute type 10 has an invalid length.
[   79.898069][ T8496] team0: Port device dummy0 added
[   79.901620][ T8496] netlink: 'syz.2.754': attribute type 10 has an invalid length.
[   79.912858][ T8496] team0: Port device dummy0 removed
[   79.923695][ T8496] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   79.931498][ T5886] bond0: (slave bond_slave_0): interface is now down
[   79.931497][ T8499] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   79.942974][ T5886] bond0: (slave bond_slave_1): interface is now down
[   79.947285][ T5886] bond0: now running without any active interface!
[   79.952722][   T28] bridge0: port 3(macvlan2) entered disabled state
[   80.000865][ T8502] block nbd1: not configured, cannot reconfigure
[   81.374984][  T792] cfg80211: failed to load regulatory.db
[  101.501933][ T8540] netlink: 256 bytes leftover after parsing attributes in process `syz.2.765'.
[  101.516248][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'.
[  101.538653][ T8542] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  101.542141][ T8542] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  101.594454][ T8536] veth7: entered allmulticast mode
[  101.616909][ T8544] veth0: entered promiscuous mode
[  101.625773][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'.
[  101.635674][ T8544] veth0 (unregistering): left promiscuous mode
[  101.643485][ T8549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.660451][ T8549] syzkaller0: entered promiscuous mode
[  101.662480][ T8549] syzkaller0: entered allmulticast mode
[  101.668761][ T8549] tipc: Resetting bearer <eth:syzkaller0>
[  101.671267][ T8549] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.767'.
[  101.686854][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'.
[  101.691327][ T8549] netlink: 'syz.2.767': attribute type 4 has an invalid length.
[  101.695301][ T8548] tipc: Resetting bearer <eth:syzkaller0>
[  101.753649][ T8548] tipc: Disabling bearer <eth:syzkaller0>
[  101.787176][ T8564] netlink: 'syz.0.773': attribute type 11 has an invalid length.
[  101.793366][ T8566] : renamed from vlan1 (while UP)
[  101.870874][ T8574] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  101.918420][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  101.931720][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  102.060700][ T8599] netlink: 'syz.1.784': attribute type 2 has an invalid length.
[  102.063880][ T8599] net_ratelimit: 266 callbacks suppressed
[  102.063888][ T8599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.108446][ T8602] netlink: 52 bytes leftover after parsing attributes in process `syz.1.785'.
[  102.112911][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'.
[  102.364788][ T8610] netlink: 'syz.1.787': attribute type 10 has an invalid length.
[  102.368992][ T8610] netlink: 'syz.1.787': attribute type 10 has an invalid length.
[  102.373883][ T8610] dummy0: entered promiscuous mode
[  102.376699][ T8610] dummy0: entered allmulticast mode
[  102.379498][ T8610] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  102.383688][   T28] bridge0: port 3(macvlan2) entered blocking state
[  102.386582][   T28] bridge0: port 3(macvlan2) entered forwarding state
[  102.389562][ T5886] bond0: (slave dummy0): interface is now down
[  102.391926][ T5886] bond0: now running without any active interface!
[  102.397343][ T1138] bridge0: port 3(macvlan2) entered disabled state
[  102.737014][ T8618] netlink: 104 bytes leftover after parsing attributes in process `syz.0.791'.
[  102.973986][ T8640] vxcan3: entered allmulticast mode
[  103.170245][ T8669] netlink: 'syz.1.810': attribute type 2 has an invalid length.
[  103.176595][ T8669] k*]: entered promiscuous mode
[  103.190847][ T8671] netlink: 'syz.2.811': attribute type 13 has an invalid length.
[  103.191233][ T8669] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  103.193576][ T8671] netlink: 'syz.2.811': attribute type 11 has an invalid length.
[  103.332551][ T8696] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  103.357404][ T8696] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  103.446045][ T8716] vlan3: entered promiscuous mode
[  103.448832][ T8716] vlan3: entered allmulticast mode
[  103.451216][ T8716] hsr_slave_1: entered allmulticast mode
[  103.513220][ T8732] bridge0: port 3(dummy0) entered blocking state
[  103.515444][ T8732] bridge0: port 3(dummy0) entered forwarding state
[  103.520778][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.526759][ T8732] 8021q: adding VLAN 0 to HW filter on device team0
[  103.531200][ T8732] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  103.538215][ T5907] syz1: Port: 1 Link ACTIVE
[  103.544888][ T5886] bond0: (slave 30): link status definitely down, disabling slave
[  103.552672][ T5886] bond0: now running without any active interface!
[  103.575562][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.677111][    C1] ==================================================================
[  103.680346][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  103.683490][    C1] Write of size 8 at addr ffff88801f4904b0 by task swapper/1/0
[  103.687395][    C1] 
[  103.688356][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  103.688370][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.688376][    C1] Call Trace:
[  103.688382][    C1]  <IRQ>
[  103.688387][    C1]  dump_stack_lvl+0x189/0x250
[  103.688404][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  103.688418][    C1]  ? rcu_is_watching+0x15/0xb0
[  103.688430][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.688440][    C1]  ? rcu_is_watching+0x15/0xb0
[  103.688449][    C1]  ? lock_release+0x4b/0x3e0
[  103.688463][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  103.688474][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  103.688485][    C1]  print_report+0xca/0x240
[  103.688495][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  103.688504][    C1]  kasan_report+0x118/0x150
[  103.688519][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  103.688529][    C1]  __xfrm_state_delete+0x696/0xca0
[  103.688541][    C1]  xfrm_timer_handler+0x18f/0xa00
[  103.688557][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  103.688570][    C1]  ? rcu_is_watching+0x15/0xb0
[  103.688579][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.688593][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.688606][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  103.688619][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  103.688633][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  103.688648][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  103.688657][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  103.688669][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  103.688680][    C1]  handle_softirqs+0x286/0x870
[  103.688690][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  103.688700][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  103.688710][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  103.688723][    C1]  __irq_exit_rcu+0xca/0x1f0
[  103.688732][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  103.688750][    C1]  irq_exit_rcu+0x9/0x30
[  103.688758][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.688774][    C1]  </IRQ>
[  103.688777][    C1]  <TASK>
[  103.688781][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.688793][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  103.688808][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  103.688816][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  103.688827][    C1] RAX: ab91f0f6fd8cb400 RBX: ffffffff819683b8 RCX: ab91f0f6fd8cb400
[  103.688834][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  103.688841][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  103.688847][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38330
[  103.688854][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  103.688862][    C1]  ? do_idle+0x1e8/0x510
[  103.688871][    C1]  ? do_idle+0x1e8/0x510
[  103.688881][    C1]  default_idle+0x13/0x20
[  103.688892][    C1]  default_idle_call+0x74/0xb0
[  103.688902][    C1]  do_idle+0x1e8/0x510
[  103.688912][    C1]  ? __pfx_do_idle+0x10/0x10
[  103.688923][    C1]  ? do_idle+0x4ef/0x510
[  103.688933][    C1]  cpu_startup_entry+0x44/0x60
[  103.688942][    C1]  start_secondary+0x101/0x110
[  103.688956][    C1]  common_startup_64+0x13e/0x147
[  103.688972][    C1]  </TASK>
[  103.688976][    C1] 
[  103.811964][    C1] Allocated by task 6241:
[  103.813416][    C1]  kasan_save_track+0x3e/0x80
[  103.815133][    C1]  __kasan_slab_alloc+0x6c/0x80
[  103.816833][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  103.818641][    C1]  xfrm_state_alloc+0x24/0x2f0
[  103.820501][    C1]  __find_acq_core+0x8a7/0x1c00
[  103.822244][    C1]  xfrm_find_acq+0x78/0xa0
[  103.823743][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  103.825503][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  103.827271][    C1]  netlink_rcv_skb+0x208/0x470
[  103.828867][    C1]  xfrm_netlink_rcv+0x79/0x90
[  103.830520][    C1]  netlink_unicast+0x82f/0x9e0
[  103.832169][    C1]  netlink_sendmsg+0x805/0xb30
[  103.833790][    C1]  __sock_sendmsg+0x21c/0x270
[  103.835417][    C1]  ____sys_sendmsg+0x505/0x830
[  103.837214][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  103.839164][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  103.840947][    C1]  do_syscall_64+0xfa/0x3b0
[  103.842486][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.844418][    C1] 
[  103.845313][    C1] Freed by task 792:
[  103.846787][    C1]  kasan_save_track+0x3e/0x80
[  103.848372][    C1]  kasan_save_free_info+0x46/0x50
[  103.850210][    C1]  __kasan_slab_free+0x5b/0x80
[  103.851818][    C1]  kmem_cache_free+0x18f/0x400
[  103.853436][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  103.855160][    C1]  process_scheduled_works+0xae1/0x17b0
[  103.857087][    C1]  worker_thread+0x8a0/0xda0
[  103.858664][    C1]  kthread+0x711/0x8a0
[  103.860147][    C1]  ret_from_fork+0x3fc/0x770
[  103.861767][    C1]  ret_from_fork_asm+0x1a/0x30
[  103.863479][    C1] 
[  103.864446][    C1] The buggy address belongs to the object at ffff88801f490480
[  103.864446][    C1]  which belongs to the cache xfrm_state of size 928
[  103.869472][    C1] The buggy address is located 48 bytes inside of
[  103.869472][    C1]  freed 928-byte region [ffff88801f490480, ffff88801f490820)
[  103.874388][    C1] 
[  103.875386][    C1] The buggy address belongs to the physical page:
[  103.878011][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f493180 pfn:0x1f490
[  103.881551][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  103.884412][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  103.887276][    C1] page_type: f5(slab)
[  103.888864][    C1] raw: 00fff00000000040 ffff88801db943c0 dead000000000122 0000000000000000
[  103.891752][    C1] raw: ffff88801f493180 00000000800e0006 00000000f5000000 0000000000000000
[  103.894617][    C1] head: 00fff00000000040 ffff88801db943c0 dead000000000122 0000000000000000
[  103.897586][    C1] head: ffff88801f493180 00000000800e0006 00000000f5000000 0000000000000000
[  103.900501][    C1] head: 00fff00000000002 ffffea00007d2401 00000000ffffffff 00000000ffffffff
[  103.903415][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  103.906331][    C1] page dumped because: kasan: bad access detected
[  103.908513][    C1] page_owner tracks the page as allocated
[  103.910636][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6082, tgid 6080 (syz.2.57), ts 49483421792, free_ts 49425256520
[  103.916824][    C1]  post_alloc_hook+0x240/0x2a0
[  103.918378][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  103.920434][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  103.922343][    C1]  alloc_pages_mpol+0x232/0x4a0
[  103.924086][    C1]  allocate_slab+0x8a/0x370
[  103.925653][    C1]  ___slab_alloc+0xbeb/0x1410
[  103.927572][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  103.929358][    C1]  xfrm_state_alloc+0x24/0x2f0
[  103.931049][    C1]  xfrm_add_sa+0x17d1/0x4070
[  103.932615][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  103.934398][    C1]  netlink_rcv_skb+0x208/0x470
[  103.936246][    C1]  xfrm_netlink_rcv+0x79/0x90
[  103.937791][    C1]  netlink_unicast+0x82f/0x9e0
[  103.939356][    C1]  netlink_sendmsg+0x805/0xb30
[  103.941046][    C1]  __sock_sendmsg+0x21c/0x270
[  103.942648][    C1]  ____sys_sendmsg+0x505/0x830
[  103.944260][    C1] page last free pid 5293 tgid 5293 stack trace:
[  103.946604][    C1]  __free_frozen_pages+0xbc4/0xd30
[  103.948282][    C1]  __slab_free+0x303/0x3c0
[  103.949821][    C1]  qlist_free_all+0x97/0x140
[  103.951579][    C1]  kasan_quarantine_reduce+0x148/0x160
[  103.953385][    C1]  __kasan_slab_alloc+0x22/0x80
[  103.955003][    C1]  __kmalloc_noprof+0x224/0x4f0
[  103.956736][    C1]  tomoyo_realpath_from_path+0xe3/0x5d0
[  103.958949][    C1]  tomoyo_path_perm+0x213/0x4b0
[  103.960655][    C1]  security_inode_getattr+0x12f/0x330
[  103.962456][    C1]  vfs_fstatat+0xb1/0x170
[  103.963871][    C1]  __x64_sys_newfstatat+0x116/0x190
[  103.965824][    C1]  do_syscall_64+0xfa/0x3b0
[  103.967370][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.969618][    C1] 
[  103.970548][    C1] Memory state around the buggy address:
[  103.972665][    C1]  ffff88801f490380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  103.975553][    C1]  ffff88801f490400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  103.978415][    C1] >ffff88801f490480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.981258][    C1]                                      ^
[  103.983248][    C1]  ffff88801f490500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.986172][    C1]  ffff88801f490580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.988911][    C1] ==================================================================
[  103.992136][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  103.994885][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  103.998289][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.001619][    C1] Call Trace:
[  104.002704][    C1]  <IRQ>
[  104.003636][    C1]  dump_stack_lvl+0x99/0x250
[  104.005604][    C1]  ? __asan_memcpy+0x40/0x70
[  104.007382][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.009213][    C1]  ? __pfx__printk+0x10/0x10
[  104.011053][    C1]  vpanic+0x281/0x750
[  104.012723][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  104.014578][    C1]  ? __pfx_vpanic+0x10/0x10
[  104.016326][    C1]  panic+0xb9/0xc0
[  104.017761][    C1]  ? __pfx_panic+0x10/0x10
[  104.019525][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  104.021796][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.023806][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  104.025565][    C1]  check_panic_on_warn+0x89/0xb0
[  104.027414][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  104.029305][    C1]  end_report+0x78/0x160
[  104.030859][    C1]  kasan_report+0x129/0x150
[  104.032595][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  104.034537][    C1]  __xfrm_state_delete+0x696/0xca0
[  104.036485][    C1]  xfrm_timer_handler+0x18f/0xa00
[  104.038346][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  104.040425][    C1]  ? rcu_is_watching+0x15/0xb0
[  104.042205][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  104.044281][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.046532][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  104.048828][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  104.051111][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  104.053068][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  104.055093][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  104.057066][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  104.058983][    C1]  handle_softirqs+0x286/0x870
[  104.060789][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  104.062786][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  104.064628][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  104.066503][    C1]  __irq_exit_rcu+0xca/0x1f0
[  104.068159][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  104.069924][    C1]  irq_exit_rcu+0x9/0x30
[  104.071489][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  104.073514][    C1]  </IRQ>
[  104.074588][    C1]  <TASK>
[  104.075702][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.077703][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  104.079552][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  104.086141][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  104.088278][    C1] RAX: ab91f0f6fd8cb400 RBX: ffffffff819683b8 RCX: ab91f0f6fd8cb400
[  104.091052][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  104.093659][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  104.096356][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38330
[  104.098882][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  104.101515][    C1]  ? do_idle+0x1e8/0x510
[  104.103055][    C1]  ? do_idle+0x1e8/0x510
[  104.104624][    C1]  default_idle+0x13/0x20
[  104.106189][    C1]  default_idle_call+0x74/0xb0
[  104.107746][    C1]  do_idle+0x1e8/0x510
[  104.109088][    C1]  ? __pfx_do_idle+0x10/0x10
[  104.110724][    C1]  ? do_idle+0x4ef/0x510
[  104.112170][    C1]  cpu_startup_entry+0x44/0x60
[  104.113716][    C1]  start_secondary+0x101/0x110
[  104.115356][    C1]  common_startup_64+0x13e/0x147
[  104.117041][    C1]  </TASK>
[  104.118707][    C1] Kernel Offset: disabled
[  104.120133][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:17:06  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44ceb RBX=1ffff11026cc7f61 RCX=0000000000080000 RDX=ffffc900039a1000
RSI=00000000000404db RDI=00000000000404dc RBP=ffffc90004c4f720 RSP=ffffc90004c4f5a0
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44cd3 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f968a87a6c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002000 CR3=000000002660c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9689b87498 00007f9689b87470 XMM03=00007f9689b874a8 00007f9689b874a0
XMM04=00007f968a6ed100 00007f9689b87460 XMM05=00007f9689b87478 00007f9689b874c0
XMM06=00007f9689b874b8 00007f9689b874b0 XMM07=00007f9689b874a8 00007f9689b874a0
XMM08=0000000000000000 00007f9689a12ee7 XMM09=0000000000000000 00007f9689a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff88801f820237 R9 =1ffff11003f04046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8fa R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe2ecf5318 CR3=00000001103e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd8c1c12e53
XMM06=0000000000000000 00007fd8c1c12e4d XMM07=0000000000000000 00007fd8c1c12e61
XMM08=0000000000000000 00007fd8c1c12ee7 XMM09=0000000000000000 00007fd8c1c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
