last executing test programs:

2.170583854s ago: executing program 2 (id=691):
r0 = socket$inet(0x2, 0x5, 0x2)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e25, @broadcast}}, 0x0, 0x20000000005, 0x4a}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x2040400)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNGETVNETLE(r1, 0x4010744d, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00020100000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
close(r0)

2.08769157s ago: executing program 2 (id=693):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000007b000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)

2.010263283s ago: executing program 2 (id=694):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x4e23, 0x6, @local}}, {{0xa, 0x1, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a3000000000080002400000000300010000030a01030000e6ff0000000002000000090009da37a088b8676fa628c519a1cdda9600030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a08000640000000010800044000000002"], 0x94}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/80, 0x50}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x100000000000009, 0x7})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0)
recvfrom$rose(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0)
r10 = socket(0x25, 0x5, 0x3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x4085)
syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="baaaaaaaaaaaffffffffffff86dd6000000000200600fe800000000a0b0000000000000000aafe80000000000000000000000000009f80004001a5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020100907800000402080a0000000000000008"], 0x0)

1.949336847s ago: executing program 2 (id=695):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x170, 0x1170, 0x1398, 0x170, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'ip6tnl0\x00', 'caif0\x00', {}, {}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@devgroup={{0x38}, {0x19}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, 0x0, 0x0)
r5 = accept(r2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a320000000014000000110001000000000000001a0a0000000a"], 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
write$tun(0xffffffffffffffff, 0x0, 0xc2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.070368165s ago: executing program 2 (id=700):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14)
sendmsg$802154_dgram(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r2, 0x104, 0x6, 0x0, &(0x7f0000000100))
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xe}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x4, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r9, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)

667.737497ms ago: executing program 0 (id=708):
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xba, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r1 = socket(0x18, 0x2, 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000)
sendmmsg$inet(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f00000000c0)=0x10, 0x4) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) (rerun: 64)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64)
sendfile(r0, r6, 0x0, 0x1) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10042008) (async, rerun: 64)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x100})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4)

610.493819ms ago: executing program 0 (id=709):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000000000000000000000000000000000000000000000000001"], 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
unshare(0x56060300)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="7a10dcdcb1464c77cb13ea5ccf49fb10dc7c9873080000008500007b64c949253efd198746f8", 0x26}], 0x1}, 0x840)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x0, 0x3c, 0x0, 0x0, 0x1}, 0x28)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540", @ANYBLOB="43e1d3bd6bff0eb547bb6c4b450c61de2ca2f91011ecd6442869fc8e6557159e944b9f57b58445a6be2fd8590480980687807ae899f29c9ef7db3f682272a6174424a08e777769299b97999afd18078ee599aed420cae8b7646a1626803b02d7"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

607.134623ms ago: executing program 0 (id=710):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) (async)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94)
socket$unix(0x1, 0x1, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950fa5a8ec40f4df43fea01c9800000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002e0003470fbb65e1c3e4ffff060060001600000056000000250000001900130004000f0007fd17e5ff8e0606040020000000000000", 0x39}], 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
r8 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) (async)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c)
sendto$inet(r7, &(0x7f00000000c0)="32525a51e4", 0x5, 0x0, 0x0, 0x0)
shutdown(r7, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
writev(r1, 0x0, 0x0)
close(r0) (async)
close(r0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)

440.408098ms ago: executing program 0 (id=711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000702060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)

439.773638ms ago: executing program 0 (id=712):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000380)=""/126, &(0x7f0000000200)=0x7e) (async, rerun: 64)
socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x20e}}], 0x30}], 0x1, 0x0)
recvfrom$inet(r0, &(0x7f0000000040)=""/109, 0x6d, 0x40000000, 0x0, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d}, 0x94) (async, rerun: 64)
r3 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) (async)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

238.544357ms ago: executing program 2 (id=715):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e22, 0x3, @loopback, 0x8}, 0xfffffffffffffd88)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000004340)=@assoc_value, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaad0aaaabb8100000008060001080006040001000000000000000000000180c200000eac1414aa"], 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
unshare(0x20040600)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0xfd)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x60, r9, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x5, 0x1, r7}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={<r10=>0x0, @in6={{0xa, 0x4e23, 0x5, @local, 0x2}}}, &(0x7f0000000100)=0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000500)={r10, @in6={{0xa, 0x4e24, 0x8, @local, 0xffff}}, 0x4, 0x100}, &(0x7f00000001c0)=0x90)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f0000000440)={0x4, 0x7a, 0x7, 0x1, 0x0, 0x4, 0x1, 0x6}, &(0x7f00000005c0)={0xa9, 0x4, 0x2, 0x7, 0x9, 0x4, 0x4, 0x8}, &(0x7f0000000600)={0x3, 0x8000, 0x6, 0x1c, 0x9, 0x0, 0x0, 0x7}, &(0x7f0000000640)={0x77359400}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x9]}, 0x8})

177.810119ms ago: executing program 1 (id=716):
socket$inet(0x2, 0x1, 0x0) (async)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="18", 0x1)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xb, 0x4) (async)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xb, 0x4)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4)

176.791822ms ago: executing program 1 (id=717):
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x5f0a, 0x4)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000140)=0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000040)="d05d477b7ddbbd120200432adf8bcb9d9f3b44a6a8a30702a9c24592b36608b8030000000000000088ee760e2580aca5021ab7713a71bdbef06b37eb7e7d8b830984c20df7c06546e47381853d4c7bd8912a54dc10f08e068618fb7632f845119eab3ba2f3a5e17715fa44db9ffd0c110e42a750", 0x74, 0x0, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0x30fea5, 0x2)

120.316457ms ago: executing program 0 (id=718):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2e, 0xd, 0x8a, {0xb, @udp_ip4_spec={@loopback, @local, 0x4e24, 0x4e20, 0x8}, {0x0, @random="34981795429f", 0x4, 0x1b2, [0x7cb, 0x608e]}, @tcp_ip6_spec={@private0, @mcast2, 0x4e24, 0x4e24, 0xd9}, {0x0, @local, 0x4, 0x400, [0x6, 0xffff3c50]}, 0x400, 0xf5ce}}})
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c6a57b7cd7621d5003814442b49c815d6a455e5", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf255d0000000c00990001800000160000001c00a6800a000600ffffffffffff00000a0006000802110000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x4000, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

119.679187ms ago: executing program 1 (id=719):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000a02060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)

60.534998ms ago: executing program 1 (id=720):
syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x9, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0)

60.052831ms ago: executing program 1 (id=721):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000ffd0000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)

0s ago: executing program 1 (id=722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4)
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x0, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r4, 0x891e, 0x0)
r5 = epoll_create1(0x80000)
r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'wlan0\x00', @random="a303834537a8"})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x3}]}}]}, 0x38}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x10000000})
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63478' (ED25519) to the list of known hosts.
syzkaller login: [   49.047394][ T5814] cgroup: Unknown subsys name 'net'
[   49.173514][ T5814] cgroup: Unknown subsys name 'cpuset'
[   49.178362][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.539536][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.544291][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.547228][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.552277][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.555302][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.557965][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.559006][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.563612][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.566507][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.577125][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.582188][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.640594][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.649323][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.652510][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.655507][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.658370][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.796465][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.893376][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.918469][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.921395][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.923901][ T5827] bridge_slave_0: entered allmulticast mode
[   54.927058][ T5827] bridge_slave_0: entered promiscuous mode
[   54.953430][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.956529][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.960662][ T5827] bridge_slave_1: entered allmulticast mode
[   54.964603][ T5827] bridge_slave_1: entered promiscuous mode
[   55.032668][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.043616][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   55.051034][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.054138][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.056810][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.059366][ T5831] bridge_slave_0: entered allmulticast mode
[   55.062085][ T5831] bridge_slave_0: entered promiscuous mode
[   55.065827][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.068164][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.070864][ T5831] bridge_slave_1: entered allmulticast mode
[   55.073590][ T5831] bridge_slave_1: entered promiscuous mode
[   55.128895][ T5827] team0: Port device team_slave_0 added
[   55.140716][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.145547][ T5827] team0: Port device team_slave_1 added
[   55.150876][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.194235][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.196644][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.205952][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.212467][ T5831] team0: Port device team_slave_0 added
[   55.215285][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.217843][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.226589][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.246821][ T5831] team0: Port device team_slave_1 added
[   55.256159][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.258994][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.262415][ T5836] bridge_slave_0: entered allmulticast mode
[   55.265203][ T5836] bridge_slave_0: entered promiscuous mode
[   55.268354][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.271074][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.273408][ T5836] bridge_slave_1: entered allmulticast mode
[   55.276067][ T5836] bridge_slave_1: entered promiscuous mode
[   55.309251][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.311632][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.320059][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.324856][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.327165][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.335539][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.342311][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.360622][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.385640][ T5827] hsr_slave_0: entered promiscuous mode
[   55.388029][ T5827] hsr_slave_1: entered promiscuous mode
[   55.417940][ T5836] team0: Port device team_slave_0 added
[   55.421744][ T5836] team0: Port device team_slave_1 added
[   55.429514][ T5831] hsr_slave_0: entered promiscuous mode
[   55.432813][ T5831] hsr_slave_1: entered promiscuous mode
[   55.435773][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.439423][ T5831] Cannot create hsr debugfs directory
[   55.470190][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.472507][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.481252][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.486715][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.490285][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.498815][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.586183][ T5836] hsr_slave_0: entered promiscuous mode
[   55.588712][ T5836] hsr_slave_1: entered promiscuous mode
[   55.591204][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.594086][ T5836] Cannot create hsr debugfs directory
[   55.792214][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.808999][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.817718][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.831375][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.874837][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.890087][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.904001][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.914367][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.945539][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.953380][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.962110][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.968981][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.051721][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.080111][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.088124][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.093271][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.095789][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.106873][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.114868][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.117122][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.145118][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.155491][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   56.163701][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.166007][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.182156][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.184429][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.187796][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.190261][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.211629][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.214009][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.263632][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.267192][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.387586][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.411097][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.456761][ T5827] veth0_vlan: entered promiscuous mode
[   56.471865][ T5827] veth1_vlan: entered promiscuous mode
[   56.486109][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.492219][ T5836] veth0_vlan: entered promiscuous mode
[   56.504388][ T5827] veth0_macvtap: entered promiscuous mode
[   56.513257][ T5836] veth1_vlan: entered promiscuous mode
[   56.515856][ T5827] veth1_macvtap: entered promiscuous mode
[   56.530054][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.538169][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.544178][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.547064][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.552326][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.555860][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.596347][ T5836] veth0_macvtap: entered promiscuous mode
[   56.606385][ T5831] veth0_vlan: entered promiscuous mode
[   56.620172][ T5830] Bluetooth: hci0: command tx timeout
[   56.622092][ T5223] Bluetooth: hci1: command tx timeout
[   56.623755][ T5831] veth1_vlan: entered promiscuous mode
[   56.631827][ T5836] veth1_macvtap: entered promiscuous mode
[   56.671675][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.691181][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.694576][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.696292][ T5831] veth0_macvtap: entered promiscuous mode
[   56.702554][ T5223] Bluetooth: hci2: command tx timeout
[   56.707376][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.722982][ T5831] veth1_macvtap: entered promiscuous mode
[   56.734890][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.737722][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.742047][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.744862][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.759476][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.764261][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.776346][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.791176][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.800972][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.803834][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.806554][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.809945][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.847170][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.875080][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.882434][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.888869][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.897983][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.962324][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.964880][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.969860][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.987625][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.227727][ T5918] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20004
[   57.284383][ T5918] xt_hashlimit: max too large, truncated to 1048576
[   57.755114][ T5967] netlink: 'syz.1.22': attribute type 21 has an invalid length.
[   57.758289][ T5967] netlink: 156 bytes leftover after parsing attributes in process `syz.1.22'.
[   57.885937][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'.
[   58.100275][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'.
[   58.699596][ T5223] Bluetooth: hci1: command tx timeout
[   58.702009][ T5830] Bluetooth: hci0: command tx timeout
[   58.779329][ T5223] Bluetooth: hci2: command tx timeout
[   59.087487][ T6017] netlink: 56 bytes leftover after parsing attributes in process `syz.1.39'.
[   59.235932][ T6034] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   59.242747][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'.
[   59.242750][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'.
[   59.248813][ T6035] netlink: 'syz.1.43': attribute type 10 has an invalid length.
[   59.253545][ T6035] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   59.258757][ T6035] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.266342][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'.
[   59.649839][ T6055] tipc: Started in network mode
[   59.651484][ T6055] tipc: Node identity f22dcee9f29c, cluster identity 4711
[   59.653861][ T6055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.656782][ T6055] syzkaller0: entered promiscuous mode
[   59.659022][ T6055] syzkaller0: entered allmulticast mode
[   59.670660][ T6055] tipc: Resetting bearer <eth:syzkaller0>
[   59.708341][ T6061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.52'.
[   59.712252][ T6061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.52'.
[   59.716105][ T6061] Zero length message leads to an empty skb
[   59.784925][ T6066] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   59.932162][ T6071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.54'.
[   60.480605][ T6052] tipc: Resetting bearer <eth:syzkaller0>
[   60.488788][ T6052] tipc: Disabling bearer <eth:syzkaller0>
[   60.782341][ T5223] Bluetooth: hci1: command tx timeout
[   60.782437][ T5830] Bluetooth: hci0: command tx timeout
[   60.859248][ T5830] Bluetooth: hci2: command tx timeout
[   61.001301][ T6115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.076291][ T6121] netlink: 'syz.2.70': attribute type 8 has an invalid length.
[   62.081521][ T6143] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET)
[   62.131465][   T33] audit: type=1804 audit(1752194425.148:2): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.80" name="/newroot/40/cgroup.controllers" dev="tmpfs" ino=224 res=1 errno=0
[   62.149854][   T33] audit: type=1800 audit(1752194425.158:3): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.80" name="cgroup.controllers" dev="tmpfs" ino=224 res=0 errno=0
[   62.162354][   T33] audit: type=1800 audit(1752194425.158:4): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.80" name="cgroup.controllers" dev="tmpfs" ino=224 res=0 errno=0
[   62.224598][ T6148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.783346][ T6155] __nla_validate_parse: 7 callbacks suppressed
[   62.783358][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'.
[   62.788092][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[   62.859940][ T5830] Bluetooth: hci1: command tx timeout
[   62.859969][ T5223] Bluetooth: hci0: command tx timeout
[   62.939317][ T5223] Bluetooth: hci2: command tx timeout
[   63.032281][ T6169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.297309][ T6183] delete_channel: no stack
[   63.587493][ T6197] geneve2: entered promiscuous mode
[   63.595778][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'.
[   63.771174][ T6211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.933543][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[   64.098392][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   64.364913][ T6243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.110'.
[   64.377046][ T6241] netlink: 52 bytes leftover after parsing attributes in process `syz.1.110'.
[   64.441092][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.114'.
[   64.444377][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.114'.
[   64.729447][ T6274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.482081][ T6298] veth0: entered promiscuous mode
[   66.234276][ T6311] trusted_key: syz.1.132 sent an empty control message without MSG_MORE.
[   66.382125][ T6318] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   66.388548][ T6318] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   67.153187][ T5858] IPVS: starting estimator thread 0...
[   67.208152][ T6334] warning: `syz.1.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.241683][ T6338] xt_l2tp: v2 doesn't support IP mode
[   67.261741][ T6331] IPVS: using max 42 ests per chain, 100800 per kthread
[   67.312030][ T6343] xt_l2tp: v2 doesn't support IP mode
[   67.493463][ T6359] syz.2.144 (6359) used greatest stack depth: 19704 bytes left
[   67.516982][ T6363] Bluetooth: MGMT ver 1.23
[   67.938595][ T6395] __nla_validate_parse: 13 callbacks suppressed
[   67.938606][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'.
[   68.364181][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   69.014152][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   69.226652][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'.
[   69.758187][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   69.893889][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   70.872431][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.879738][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.117904][ T6516] netlink: 56 bytes leftover after parsing attributes in process `syz.0.193'.
[   71.121892][ T6515] TCP: TCP_TX_DELAY enabled
[   71.517989][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   71.542389][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   71.962779][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'.
[   72.042899][ T6549] x_tables: duplicate underflow at hook 1
[   72.470099][ T6580] netlink: 'syz.2.220': attribute type 21 has an invalid length.
[   73.595595][ T6614] macsec1: entered promiscuous mode
[   73.597483][ T6614] macsec1: entered allmulticast mode
[   73.980797][ T6630] netlink: 'syz.1.233': attribute type 74 has an invalid length.
[   74.301114][ T6641] __nla_validate_parse: 6 callbacks suppressed
[   74.301131][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   74.404950][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'.
[   74.525317][ T6658] syz.0.243 uses old SIOCAX25GETINFO
[   74.736232][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'.
[   74.747450][ T6682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'.
[   74.902708][ T6700] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.252'.
[   74.965650][ T6707] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   75.405998][ T6738] syzkaller1: entered promiscuous mode
[   75.409934][ T6738] syzkaller1: entered allmulticast mode
[   75.747092][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'.
[   75.764632][ T6769] netlink: 'syz.2.272': attribute type 6 has an invalid length.
[   75.768343][ T6769] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.272'.
[   75.845418][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'.
[   75.888618][ T6778] bridge1: port 1(ip6gretap1) entered blocking state
[   75.897480][ T6778] bridge1: port 1(ip6gretap1) entered disabled state
[   75.909851][ T6778] ip6gretap1: entered allmulticast mode
[   75.913926][ T6778] ip6gretap1: entered promiscuous mode
[   75.932153][ T6778] veth3: entered promiscuous mode
[   75.934438][ T6778] bridge1: port 2(veth3) entered blocking state
[   75.937505][ T6778] bridge1: port 2(veth3) entered disabled state
[   75.943048][ T6778] veth3: entered allmulticast mode
[   76.547869][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'.
[   76.552631][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'.
[   77.303777][ T6866] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   77.327952][ T6866] bond1: entered promiscuous mode
[   77.331211][ T6866] bond1: entered allmulticast mode
[   77.333724][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.684368][ T6893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.735481][ T6895] tipc: Started in network mode
[   77.737299][ T6895] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711
[   77.744160][ T6895] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   77.863761][ T6899] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   79.184813][ T6914] pim6reg: entered allmulticast mode
[   79.187383][ T6914] pim6reg: left allmulticast mode
[   79.339584][ T6922] __nla_validate_parse: 10 callbacks suppressed
[   79.339597][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'.
[   79.517083][ T6932] tipc: Started in network mode
[   79.518787][ T6932] tipc: Node identity ac14140f, cluster identity 4711
[   79.525689][ T6932] tipc: New replicast peer: 255.255.255.255
[   79.528709][ T6932] tipc: Enabled bearer <udp:syz2>, priority 10
[   79.533138][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'.
[   79.536845][ T6932] tipc: Disabling bearer <udp:syz2>
[   79.548384][ T6932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'.
[   79.762209][ T6944] netlink: 'syz.0.327': attribute type 29 has an invalid length.
[   79.770443][ T6944] netlink: 'syz.0.327': attribute type 29 has an invalid length.
[   79.776313][ T6944] netlink: 500 bytes leftover after parsing attributes in process `syz.0.327'.
[   79.933902][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'.
[   80.776770][ T6991] netlink: 208 bytes leftover after parsing attributes in process `syz.2.339'.
[   80.779974][ T6991] netlink: 208 bytes leftover after parsing attributes in process `syz.2.339'.
[   80.875788][ T6995] bridge_slave_0: left allmulticast mode
[   80.877769][ T6995] bridge_slave_0: left promiscuous mode
[   80.882336][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.887884][ T6995] bridge_slave_1: left allmulticast mode
[   80.890691][ T6995] bridge_slave_1: left promiscuous mode
[   80.892676][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.899007][ T6995] bond0: (slave bond_slave_0): Releasing backup interface
[   80.907624][ T6995] bond0: (slave bond_slave_1): Releasing backup interface
[   80.918126][ T6995] team0: Port device team_slave_0 removed
[   80.927505][ T6995] team0: Port device team_slave_1 removed
[   80.930167][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.932592][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.936463][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.938898][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.947479][ T6995] bond0: (slave wlan1): Releasing backup interface
[   80.956203][ T6995] ip6gretap1: left allmulticast mode
[   80.958052][ T6995] ip6gretap1: left promiscuous mode
[   80.961164][ T6995] bridge1: port 1(ip6gretap1) entered disabled state
[   80.965003][ T6995] veth3: left allmulticast mode
[   80.967119][ T6995] bridge1: port 2(veth3) entered disabled state
[   81.074152][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   81.077454][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   81.080956][ T7003] bridge_slave_1: left allmulticast mode
[   81.083522][ T7003] bridge_slave_1: left promiscuous mode
[   81.086189][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.094459][ T7003] bridge_slave_0: left allmulticast mode
[   81.096997][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.102625][ T1270] cfg80211: failed to load regulatory.db
[   82.405466][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'.
[   83.456376][ T7065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   83.927590][ T7088] syz.0.368: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.950208][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.0.368 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   83.950226][ T7088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.950234][ T7088] Call Trace:
[   83.950239][ T7088]  <TASK>
[   83.950245][ T7088]  dump_stack_lvl+0x189/0x250
[   83.950268][ T7088]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.950283][ T7088]  ? __pfx__printk+0x10/0x10
[   83.950300][ T7088]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.950317][ T7088]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.950334][ T7088]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   83.950352][ T7088]  warn_alloc+0x214/0x310
[   83.950369][ T7088]  ? stack_depot_save_flags+0x445/0x900
[   83.950391][ T7088]  ? __pfx_warn_alloc+0x10/0x10
[   83.950409][ T7088]  ? kasan_save_track+0x4f/0x80
[   83.950424][ T7088]  ? xskq_create+0x56/0x170
[   83.950434][ T7088]  ? xsk_init_queue+0xb0/0x110
[   83.950447][ T7088]  ? xsk_setsockopt+0x43f/0x710
[   83.950462][ T7088]  ? do_sock_setsockopt+0x25a/0x3e0
[   83.950475][ T7088]  ? __x64_sys_setsockopt+0x18b/0x220
[   83.950488][ T7088]  ? do_syscall_64+0xfa/0x3b0
[   83.950498][ T7088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.950513][ T7088]  __vmalloc_node_range_noprof+0x125/0x12f0
[   83.950546][ T7088]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.950564][ T7088]  ? __kasan_kmalloc+0x93/0xb0
[   83.950581][ T7088]  vmalloc_user_noprof+0xad/0xf0
[   83.950597][ T7088]  ? xskq_create+0xbf/0x170
[   83.950608][ T7088]  xskq_create+0xbf/0x170
[   83.950621][ T7088]  xsk_init_queue+0xb0/0x110
[   83.950638][ T7088]  xsk_setsockopt+0x43f/0x710
[   83.950657][ T7088]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.950672][ T7088]  ? __lock_acquire+0xab9/0xd20
[   83.950693][ T7088]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   83.950704][ T7088]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.950721][ T7088]  do_sock_setsockopt+0x25a/0x3e0
[   83.950738][ T7088]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   83.950756][ T7088]  ? __fget_files+0x2a/0x420
[   83.950779][ T7088]  __x64_sys_setsockopt+0x18b/0x220
[   83.950798][ T7088]  do_syscall_64+0xfa/0x3b0
[   83.950809][ T7088]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.950820][ T7088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.950830][ T7088]  ? exc_page_fault+0x9f/0xf0
[   83.950848][ T7088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.950858][ T7088] RIP: 0033:0x7f0f5778e929
[   83.950870][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.950879][ T7088] RSP: 002b:00007f0f58682038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   83.950891][ T7088] RAX: ffffffffffffffda RBX: 00007f0f579b5fa0 RCX: 00007f0f5778e929
[   83.950900][ T7088] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[   83.950907][ T7088] RBP: 00007f0f57810b39 R08: 0000000000000004 R09: 0000000000000000
[   83.950914][ T7088] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.950921][ T7088] R13: 0000000000000000 R14: 00007f0f579b5fa0 R15: 00007ffc032d5138
[   83.950940][ T7088]  </TASK>
[   83.950945][ T7088] Mem-Info:
[   84.062853][ T7088] active_anon:5880 inactive_anon:0 isolated_anon:0
[   84.062853][ T7088]  active_file:869 inactive_file:38215 isolated_file:0
[   84.062853][ T7088]  unevictable:1768 dirty:73 writeback:0
[   84.062853][ T7088]  slab_reclaimable:9170 slab_unreclaimable:53134
[   84.062853][ T7088]  mapped:18155 shmem:2439 pagetables:1109
[   84.062853][ T7088]  sec_pagetables:0 bounce:0
[   84.062853][ T7088]  kernel_misc_reclaimable:0
[   84.062853][ T7088]  free:297169 free_pcp:21021 free_cma:0
[   84.078359][ T7088] Node 0 active_anon:14812kB inactive_anon:0kB active_file:1896kB inactive_file:136132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46936kB dirty:108kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5304kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.089359][ T7088] Node 1 active_anon:8776kB inactive_anon:0kB active_file:1580kB inactive_file:16728kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25752kB dirty:184kB writeback:0kB shmem:4716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6376kB pagetables:1908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.113458][ T7088] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.123242][ T7088] lowmem_reserve[]: 0 812 812 812 812
[   84.125039][ T7088] Node 0 DMA32 free:266908kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14744kB inactive_anon:0kB active_file:1896kB inactive_file:136132kB unevictable:3536kB writepending:108kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:44204kB local_pcp:13964kB free_cma:0kB
[   84.148411][ T7088] lowmem_reserve[]: 0 0 0 0 0
[   84.152655][ T7088] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   84.168412][ T7088] lowmem_reserve[]: 0 0 854 854 854
[   84.173685][ T7088] Node 1 Normal free:447260kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8776kB inactive_anon:0kB active_file:1580kB inactive_file:16728kB unevictable:3536kB writepending:184kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41132kB local_pcp:26168kB free_cma:0kB
[   84.184537][ T7088] lowmem_reserve[]: 0 0 0 0 0
[   84.187769][ T7088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.199265][ T7088] Node 0 DMA32: 1609*4kB (UME) 269*8kB (UME) 141*16kB (UME) 224*32kB (UME) 98*64kB (UM) 53*128kB (UME) 43*256kB (UM) 11*512kB (UME) 10*1024kB (UM) 6*2048kB (UM) 48*4096kB (UM) = 266844kB
[   84.211559][ T7088] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   84.218382][ T7088] Node 1 Normal: 602*4kB (UM) 319*8kB (UME) 147*16kB (UME) 352*32kB (UME) 152*64kB (UME) 71*128kB (UME) 35*256kB (UM) 25*512kB (UM) 13*1024kB (UM) 7*2048kB (UM) 88*4096kB (M) = 447248kB
[   84.241682][ T7088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.249272][ T7088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.254466][ T7088] 41523 total pagecache pages
[   84.256632][ T7088] 0 pages in swap cache
[   84.258353][ T7088] Free swap  = 124996kB
[   84.260082][ T7088] Total swap = 124996kB
[   84.261506][ T7088] 786301 pages RAM
[   84.263010][ T7088] 0 pages HighMem/MovableOnly
[   84.264706][ T7088] 241078 pages reserved
[   84.266203][ T7088] 0 pages cma reserved
[   84.325313][ T7119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.335411][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.391994][ T7173] __nla_validate_parse: 8 callbacks suppressed
[   85.392009][ T7173] netlink: 72 bytes leftover after parsing attributes in process `syz.2.381'.
[   85.491962][ T7180] netlink: 2 bytes leftover after parsing attributes in process `syz.2.384'.
[   85.495651][ T7180] batadv_slave_1: entered promiscuous mode
[   86.883382][ T7233] x_tables: duplicate underflow at hook 1
[   87.382139][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[   87.386266][ T7238] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   87.390161][ T7238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.463170][ T7246] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   88.108787][ T7270] netlink: 88 bytes leftover after parsing attributes in process `syz.2.407'.
[   88.445655][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   88.480009][   T47] IPVS: starting estimator thread 0...
[   88.569549][ T7288] IPVS: using max 78 ests per chain, 187200 per kthread
[   88.724605][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[   88.732443][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'.
[   88.748643][ T7293] netlink: 224 bytes leftover after parsing attributes in process `syz.2.415'.
[   88.760674][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[   88.838368][ T7293] team0 (unregistering): Port device team_slave_0 removed
[   88.848347][ T7293] team0 (unregistering): Port device team_slave_1 removed
[   89.335097][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   90.242883][ T7374] vxcan3: entered allmulticast mode
[   90.710923][ T7390] __nla_validate_parse: 4 callbacks suppressed
[   90.710937][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[   90.721879][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[   91.055878][ T7405] netlink: 80 bytes leftover after parsing attributes in process `syz.0.449'.
[   91.702715][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'.
[   91.917115][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'.
[   91.924717][ T7433] geneve2: entered promiscuous mode
[   92.100521][ T7443] syzkaller0: entered allmulticast mode
[   92.102109][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'.
[   92.106656][ T7442] syzkaller0: left allmulticast mode
[   92.111439][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.461'.
[   92.114680][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'.
[   92.599868][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'.
[   92.622814][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'.
[   94.012932][ T7512] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   94.198957][ T7517] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.203228][ T7517] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.206448][ T7517] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.209494][ T7517] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.297796][ T7528] delete_channel: no stack
[   95.140358][ T7548] macvlan0: entered promiscuous mode
[   95.301140][ T7566] tc_dump_action: action bad kind
[   96.206612][ T7590] __nla_validate_parse: 11 callbacks suppressed
[   96.206627][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.504'.
[   96.255850][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[   96.274020][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'.
[   97.255200][ T7615] netlink: 'syz.2.511': attribute type 1 has an invalid length.
[   97.258713][ T7615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.511'.
[   97.906621][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'.
[   97.934804][ T5279] udevd[5279]: worker [6349] terminated by signal 33 (Unknown signal 33)
[   97.939041][ T5279] udevd[5279]: worker [6349] failed while handling '/devices/virtual/block/loop1'
[   98.058505][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'.
[   98.065968][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'.
[   98.186245][ T7647] netlink: 80 bytes leftover after parsing attributes in process `syz.2.520'.
[   99.316872][ T7681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.385329][ T7681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.439034][ T7681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.495033][ T7681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.576326][ T7681] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.597328][ T7681] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.610106][ T7681] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.616935][ T7681] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.590587][ T7745] bond0: entered promiscuous mode
[  100.592694][ T7745] bond_slave_0: entered promiscuous mode
[  100.594794][ T7745] bond_slave_1: entered promiscuous mode
[  100.681884][ T7749] xt_hashlimit: max too large, truncated to 1048576
[  100.684345][ T7749] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  100.688235][ T7750] netlink: 212 bytes leftover after parsing attributes in process `syz.0.545'.
[  100.708820][ T7752] netlink: 212 bytes leftover after parsing attributes in process `syz.0.545'.
[  101.673918][ T7780] __nla_validate_parse: 1 callbacks suppressed
[  101.673928][ T7780] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.554'.
[  101.927179][ T7797] netlink: 'syz.0.558': attribute type 11 has an invalid length.
[  101.930768][ T7797] netlink: 224 bytes leftover after parsing attributes in process `syz.0.558'.
[  101.991623][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[  102.003538][ T7802] gtp0: entered promiscuous mode
[  102.005769][ T7802] gtp0: entered allmulticast mode
[  103.111239][ T7823] netlink: 'syz.1.566': attribute type 32 has an invalid length.
[  103.114965][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'.
[  103.123252][ T7823] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  103.334146][ T7830] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  103.566327][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.568'.
[  104.037963][ T7846] netlink: 88 bytes leftover after parsing attributes in process `syz.1.572'.
[  104.452497][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'.
[  104.546980][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  104.681394][ T7860] syzkaller0: entered promiscuous mode
[  104.683319][ T7860] syzkaller0: entered allmulticast mode
[  104.687574][ T7860] x_tables: duplicate underflow at hook 1
[  105.608824][ T7879] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.726762][ T7881] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  106.279811][ T7891] IPVS: Error connecting to the multicast addr
[  106.452269][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[  106.828419][ T7930] netlink: 'syz.0.598': attribute type 5 has an invalid length.
[  106.857584][ T7932] netlink: 308 bytes leftover after parsing attributes in process `syz.0.599'.
[  106.862534][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'.
[  106.866749][ T7932] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  107.070613][ T7939] bond0: Unable to set up delay as MII monitoring is disabled
[  107.253289][ T7941] ipvlan2: entered promiscuous mode
[  107.258998][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'.
[  107.663563][ T7956] netlink: 56 bytes leftover after parsing attributes in process `syz.1.606'.
[  108.583834][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  108.685637][ T7988] netlink: 'syz.0.616': attribute type 2 has an invalid length.
[  108.795184][ T7991] xt_hashlimit: max too large, truncated to 1048576
[  109.527217][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'.
[  109.583860][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  110.585502][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[  110.891803][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[  110.895686][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[  111.803812][ T8076] netlink: 'syz.2.643': attribute type 13 has an invalid length.
[  111.806410][ T8076] netlink: 'syz.2.643': attribute type 17 has an invalid length.
[  111.838896][ T8076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.932008][ T8076] syz.2.643 (8076) used greatest stack depth: 18136 bytes left
[  112.270321][ T8105] __nla_validate_parse: 1 callbacks suppressed
[  112.270335][ T8105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.651'.
[  112.867016][ T8111] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  112.941265][ T8116] netlink: 112 bytes leftover after parsing attributes in process `syz.0.656'.
[  112.993899][ T8123] pimreg: entered allmulticast mode
[  113.678162][ T8142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.661'.
[  113.685006][ T8142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.661'.
[  113.978309][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'.
[  114.042890][ T8152] xt_hashlimit: max too large, truncated to 1048576
[  114.550374][ T8175] netlink: 'syz.0.673': attribute type 9 has an invalid length.
[  114.873515][ T8184] 8021q: VLANs not supported on ipvlan1
[  115.140985][ T8210] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  115.386184][ T8222] netlink: 68 bytes leftover after parsing attributes in process `syz.1.687'.
[  116.217181][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  116.222805][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  116.234912][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.694'.
[  116.352400][ T8246] netlink: 'syz.0.696': attribute type 12 has an invalid length.
[  116.355092][ T8246] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.696'.
[  117.022529][ T8252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.026220][ T8252] ieee802154 phy0 wpan0: encryption failed: -22
[  117.265545][ T8249] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  117.479512][ T8281] xt_CT: No such helper "snmp"
[  118.216179][ T8325] netlink: 'syz.1.722': attribute type 4 has an invalid length.
[  118.277236][ T8326] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  118.281159][ T8326] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  118.285523][ T8326] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  118.289643][ T8326] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  118.293142][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.1.722 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  118.297096][ T8326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.300786][ T8326] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[  118.303045][ T8326] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9f 2d 5c fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[  118.310300][ T8326] RSP: 0018:ffffc90002a6ef80 EFLAGS: 00010202
[  118.312486][ T8326] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000
[  118.315650][ T8326] RDX: ffffc9000f8f9000 RSI: 0000000000000324 RDI: 0000000000000058
[  118.318756][ T8326] RBP: dffffc0000000000 R08: ffff8881228e1cc0 R09: 0000000000000002
[  118.321422][ T8326] R10: 00000000ffffffff R11: ffffffff8986dc00 R12: 0000000000000000
[  118.323955][ T8326] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88803cba5800
[  118.327213][ T8326] FS:  00007fb3b03f66c0(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  118.330916][ T8326] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.333686][ T8326] CR2: 0000000020000000 CR3: 000000010b4d0000 CR4: 00000000000006f0
[  118.336933][ T8326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  118.340218][ T8326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  118.343628][ T8326] Call Trace:
[  118.345097][ T8326]  <TASK>
[  118.346400][ T8326]  drr_qlen_notify+0x2c/0xf0
[  118.348293][ T8326]  qdisc_tree_reduce_backlog+0x29c/0x480
[  118.350820][ T8326]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  118.352878][ T8326]  fq_change+0x1519/0x1f50
[  118.354423][ T8326]  ? __pfx_fq_change+0x10/0x10
[  118.356035][ T8326]  ? __hrtimer_setup+0x187/0x210
[  118.357704][ T8326]  fq_init+0x699/0x960
[  118.359058][ T8326]  ? __pfx_fq_init+0x10/0x10
[  118.360573][ T8326]  ? __pfx_fq_init+0x10/0x10
[  118.362072][ T8326]  qdisc_create+0x7ac/0xea0
[  118.363914][ T8326]  tc_modify_qdisc+0x1426/0x2010
[  118.365509][ T8326]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  118.367199][ T8326]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  118.369347][ T8326]  rtnetlink_rcv_msg+0x77c/0xb70
[  118.371353][ T8326]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  118.373249][ T8326]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  118.374979][ T8326]  netlink_rcv_skb+0x208/0x470
[  118.376478][ T8326]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  118.378823][ T8326]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.381041][ T8326]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.383242][ T8326]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.385004][ T8326]  netlink_unicast+0x75b/0x8d0
[  118.386559][ T8326]  netlink_sendmsg+0x805/0xb30
[  118.388088][ T8326]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.389804][ T8326]  ? aa_sock_msg_perm+0x94/0x160
[  118.391422][ T8326]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.393140][ T8326]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.394812][ T8326]  __sock_sendmsg+0x21c/0x270
[  118.396339][ T8326]  ____sys_sendmsg+0x505/0x830
[  118.397892][ T8326]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.399587][ T8326]  ? import_iovec+0x74/0xa0
[  118.401085][ T8326]  ___sys_sendmsg+0x21f/0x2a0
[  118.402636][ T8326]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.404288][ T8326]  ? __fget_files+0x2a/0x420
[  118.405807][ T8326]  ? __fget_files+0x3a0/0x420
[  118.407349][ T8326]  __x64_sys_sendmsg+0x19b/0x260
[  118.408936][ T8326]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.410731][ T8326]  ? rcu_is_watching+0x15/0xb0
[  118.412286][ T8326]  ? do_syscall_64+0xbe/0x3b0
[  118.413862][ T8326]  do_syscall_64+0xfa/0x3b0
[  118.415300][ T8326]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.416968][ T8326]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.418906][ T8326]  ? exc_page_fault+0x9f/0xf0
[  118.420444][ T8326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.422364][ T8326] RIP: 0033:0x7fb3b258e929
[  118.424175][ T8326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.430445][ T8326] RSP: 002b:00007fb3b03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.433014][ T8326] RAX: ffffffffffffffda RBX: 00007fb3b27b6080 RCX: 00007fb3b258e929
[  118.435740][ T8326] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 000000000000000c
[  118.438360][ T8326] RBP: 00007fb3b2610b39 R08: 0000000000000000 R09: 0000000000000000
[  118.440888][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.443484][ T8326] R13: 0000000000000000 R14: 00007fb3b27b6080 R15: 00007ffd2d889a18
[  118.445976][ T8326]  </TASK>
[  118.446981][ T8326] Modules linked in:
[  118.448717][ T8326] ---[ end trace 0000000000000000 ]---
[  118.450496][ T8326] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[  118.452842][ T8326] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9f 2d 5c fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[  118.458993][ T8326] RSP: 0018:ffffc90002a6ef80 EFLAGS: 00010202
[  118.461335][ T8326] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000
[  118.464289][ T8326] RDX: ffffc9000f8f9000 RSI: 0000000000000324 RDI: 0000000000000058
[  118.466813][ T8326] RBP: dffffc0000000000 R08: ffff8881228e1cc0 R09: 0000000000000002
[  118.469362][ T8326] R10: 00000000ffffffff R11: ffffffff8986dc00 R12: 0000000000000000
[  118.471886][ T8326] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff88803cba5800
[  118.474768][ T8326] FS:  00007fb3b03f66c0(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  118.478280][ T8326] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.481047][ T8326] CR2: 0000000020000000 CR3: 000000010b4d0000 CR4: 00000000000006f0
[  118.484336][ T8326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  118.487133][ T8326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  118.489711][ T8326] Kernel panic - not syncing: Fatal exception in interrupt
[  118.492782][ T8326] Kernel Offset: disabled
[  118.494607][ T8326] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:41:21  Registers:
info registers vcpu 0

CPU#0
RAX=2347e4ca7c60aa00 RBX=ffffffff81975d58 RCX=2347e4ca7c60aa00 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1def0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000000 CR3=0000000028fe2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000a80a6001c0000 0016000080010099
XMM02=0000000000110208 0006000a0000ffff XMM03=ffffffff0006000a 80a6001c00000016
XMM04=00007f0f584ed100 00007f0f57985440 XMM05=00007f0f57985458 00007f0f579854a0
XMM06=00007f0f57985498 00007f0f57985490 XMM07=00007f0f57985488 00007f0f57985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0f57811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001049 RDI=000000000000104a RBP=00000000000003f8 RSP=ffffc90002a6e7b0
R8 =ffff888107f78237 R9 =1ffff11020fef046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af791d R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb3b03f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000000 CR3=000000010b4d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb3b2785478 00007fb3b2785450 XMM03=00007fb3b2785488 00007fb3b2785480
XMM04=00007fb3b32ed100 00007fb3b2785440 XMM05=00007fb3b2785458 00007fb3b27854a0
XMM06=00007fb3b2785498 00007fb3b2785490 XMM07=00007fb3b2785488 00007fb3b2785480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fb3b2611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
