last executing test programs:

6.082362633s ago: executing program 1 (id=566):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x9d, 0x29}, 0x2c)

5.97376405s ago: executing program 1 (id=572):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000de80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x874, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "b665b88e1104a9e19e5eeb62"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "66af62fa1c4f5787ced2a60f5a0cbdf2f51624e0b65f857224fa269e95a10501f869b61811cf737c15537216891e8008970af657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a07fe657c8c34d7919d552e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9349e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x720, 0x3, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a028412139aaf9d7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x37, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb9371"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x53, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eecaa84e2e810eddaad2ff0dd"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f182bb00dde2c0eb58ccd8c3c1b2afb8a3b1bf8c5ef325930212d533596061a2af5b88c51ce85186eac014a92c3de7a0627"}]}, {0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c60bcbbe83d695"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '\xf9\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "666a203baf36bab1bb85f4519c122ca289dcd11925e84ab71600a4a601065f8e5f6520aeca7829cdc3a18535ae84b6461d7f69"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "15a378cb1185ebac10a35259329a0ab752a289c7d2a6e5e0cc48530e10bf3e0b223189dce581ea380c10710dfc044b77c8e059916e3f68a6587f64b35c6d011945ea46a1bbec21497e1773357fb06275454537da85c5bb3968d61c335c600ada03e0696bbbff61a31602dd1eb1822a393da8c3f9231058993738c3ebc2265aa3d3e7dcdc7ed65f54a2d4c7fec67677b5b163e2a3050b68f4c8b505634acfc4f98cea005eb572a6f0a8aab9135fc6b7dc5b84e9d3568a4b9607f99d979239ef9e7049de8f1ab62ba7946b1115c773d7a2e95488e0f0a0f5f5d295085d2647ade57efb432662d39f74c5a480ccb5428b727b73998ddde26a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0xf4, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "53fdf90585b0060c79335fac683e9329c7f427428c0bfb7be57f6b860562a2d59ec73e123aabe53644f33ed1ca7dd8159a7b16aaa0c48204948e71c31f63ef5a4e01f4dbd5d2c9e3939cda61f02d8bfe29cc5958de91790965b4dda79dc4671012815213dd1e67c9d6ad5627635b7598531853ef882773b027a4707e52b1b49737dff1a4d0d83df43a65f520be39d5b64ca88626a09ba5605ab496b6333ef4428ee8601388a7b5680615229f88b17bb648114bef94a0af4ac2187fe6b77164eca334ae32"}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5476e4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xe}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xfff}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x24, 0x6, "3eb45c5a436a8675a6f4475ba5436a923b1f798c9ce8d7f61eecab59ae06a1cc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbe8}, 0x1, 0x0, 0x0, 0x8040}, 0x894)

5.922009398s ago: executing program 1 (id=575):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0)

5.791010341s ago: executing program 1 (id=580):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0)

5.709508839s ago: executing program 1 (id=585):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x4, 0x1}, 0xc)

5.431467596s ago: executing program 1 (id=591):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.358122896s ago: executing program 32 (id=591):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.063813613s ago: executing program 3 (id=698):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x30}], 0x1, 0x0, 0xffffffffffffff6f}, 0x2002)

1.992447031s ago: executing program 3 (id=699):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r8, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

1.285027743s ago: executing program 3 (id=720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

1.143979436s ago: executing program 3 (id=723):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x3, 0xb}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x3a)

730.886715ms ago: executing program 0 (id=733):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0)

730.661983ms ago: executing program 0 (id=734):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x36}], 0x10}}], 0x1, 0xc804)

673.507047ms ago: executing program 0 (id=735):
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000000000000e33eb00b2678628a59b6d2960c000600010000000100000018002f"], 0x38}}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

673.326602ms ago: executing program 2 (id=736):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, 0x8)

622.387907ms ago: executing program 2 (id=737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)='6', 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x1}}], 0x2, 0x0)

622.194181ms ago: executing program 2 (id=738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

199.557169ms ago: executing program 0 (id=739):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)

155.864248ms ago: executing program 0 (id=740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
listen(0xffffffffffffffff, 0xfff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c004}, 0x24084084)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

137.874083ms ago: executing program 2 (id=741):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2802000012002fc66e94fd6334380000100000000c000800000000000000000008024380"], 0x228}], 0x1}, 0x40)

105.361421ms ago: executing program 3 (id=742):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000023c0)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf", 0x4b}, {&(0x7f0000002340)="00dad2d0d191", 0x6}], 0x2, 0x9)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0)

99.318403ms ago: executing program 0 (id=743):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

84.238698ms ago: executing program 2 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)

275.801µs ago: executing program 3 (id=745):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x8000)
getpeername$packet(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2400c801)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x4, @remote}, 0x10)

0s ago: executing program 2 (id=746):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61617' (ED25519) to the list of known hosts.
syzkaller login: [   47.733166][ T5795] cgroup: Unknown subsys name 'net'
[   47.874327][ T5795] cgroup: Unknown subsys name 'cpuset'
[   47.878182][ T5795] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.173840][ T5795] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.975467][ T5826] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.255962][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   56.278044][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.397753][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.400490][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.407443][ T5839] bridge_slave_0: entered allmulticast mode
[   56.410182][ T5839] bridge_slave_0: entered promiscuous mode
[   56.418645][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.421079][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.424320][ T5839] bridge_slave_1: entered allmulticast mode
[   56.427511][ T5839] bridge_slave_1: entered promiscuous mode
[   56.505542][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.590430][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.650190][ T5839] team0: Port device team_slave_0 added
[   56.670084][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.670310][ T5839] team0: Port device team_slave_1 added
[   56.675326][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.678257][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.681296][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.684342][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.717158][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.720046][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.730595][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.744857][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.747248][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.756466][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.817602][ T5839] hsr_slave_0: entered promiscuous mode
[   56.820071][ T5839] hsr_slave_1: entered promiscuous mode
[   56.996075][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.002477][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.007117][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.011426][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.034082][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.036581][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.039480][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.041947][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.080355][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.090072][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.093323][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.101055][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.111167][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.113658][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.123595][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.125966][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.211982][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.234432][ T5839] veth0_vlan: entered promiscuous mode
[   57.240027][ T5839] veth1_vlan: entered promiscuous mode
[   57.254249][ T5839] veth0_macvtap: entered promiscuous mode
[   57.258208][ T5839] veth1_macvtap: entered promiscuous mode
[   57.269808][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.275406][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.283423][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.287830][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.291127][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.294647][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.097609][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.101423][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.104632][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.111179][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.114700][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.162688][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.166532][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.170149][ T5894] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.192152][ T5894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.193846][ T5893] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.198457][ T5894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.198465][ T5893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.204051][ T5894] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.208632][ T5894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.212964][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.303789][ T5881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.357749][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   58.384792][ T5881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.504444][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.506847][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.509374][ T5887] bridge_slave_0: entered allmulticast mode
[   58.513184][ T5887] bridge_slave_0: entered promiscuous mode
[   58.517094][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.520112][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.524797][ T5887] bridge_slave_1: entered allmulticast mode
[   58.528806][ T5887] bridge_slave_1: entered promiscuous mode
[   58.574508][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   58.587898][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.626600][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.644934][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   58.688468][ T5887] team0: Port device team_slave_0 added
[   58.710817][ T5887] team0: Port device team_slave_1 added
[   58.752935][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.755675][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.758287][ T5889] bridge_slave_0: entered allmulticast mode
[   58.761016][ T5889] bridge_slave_0: entered promiscuous mode
[   58.776604][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.779440][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.790499][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.797804][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.800551][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.812412][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.843854][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.846785][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.849593][ T5889] bridge_slave_1: entered allmulticast mode
[   58.853483][ T5889] bridge_slave_1: entered promiscuous mode
[   58.883300][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.887327][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.889779][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.894373][ T5891] bridge_slave_0: entered allmulticast mode
[   58.897625][ T5891] bridge_slave_0: entered promiscuous mode
[   58.900716][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.903331][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.905787][ T5891] bridge_slave_1: entered allmulticast mode
[   58.908617][ T5891] bridge_slave_1: entered promiscuous mode
[   58.928423][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.966506][ T5887] hsr_slave_0: entered promiscuous mode
[   58.968774][ T5887] hsr_slave_1: entered promiscuous mode
[   58.970891][ T5887] debugfs: 'hsr0' already exists in 'hsr'
[   58.973263][ T5887] Cannot create hsr debugfs directory
[   58.978440][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.996628][ T5889] team0: Port device team_slave_0 added
[   58.999821][ T5889] team0: Port device team_slave_1 added
[   59.004505][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.056559][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.058858][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.067401][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.073592][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.075808][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.084159][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.112888][ T5891] team0: Port device team_slave_0 added
[   59.119774][ T5891] team0: Port device team_slave_1 added
[   59.161965][ T5889] hsr_slave_0: entered promiscuous mode
[   59.164562][ T5889] hsr_slave_1: entered promiscuous mode
[   59.166937][ T5889] debugfs: 'hsr0' already exists in 'hsr'
[   59.168855][ T5889] Cannot create hsr debugfs directory
[   59.187111][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.190081][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.202053][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.240239][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.242945][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.251495][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.331288][ T5891] hsr_slave_0: entered promiscuous mode
[   59.334711][ T5891] hsr_slave_1: entered promiscuous mode
[   59.336792][ T5891] debugfs: 'hsr0' already exists in 'hsr'
[   59.338583][ T5891] Cannot create hsr debugfs directory
[   59.380419][ T5881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.454875][ T5887] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.472456][ T5887] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.484412][ T5887] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.493925][ T5887] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.567143][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.583370][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   59.588660][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.591432][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.602680][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.605120][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.708278][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.734033][ T5887] veth0_vlan: entered promiscuous mode
[   59.739849][ T5887] veth1_vlan: entered promiscuous mode
[   59.757020][ T5887] veth0_macvtap: entered promiscuous mode
[   59.761177][ T5887] veth1_macvtap: entered promiscuous mode
[   59.771375][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.778603][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.786092][ T5913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.790259][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.794518][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.798467][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.846012][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.848567][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.868009][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.870530][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.014964][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[   60.163076][ T5894] Bluetooth: hci0: command tx timeout
[   60.242428][   T55] Bluetooth: hci2: command tx timeout
[   60.245151][ T5894] Bluetooth: hci1: command tx timeout
[   60.740908][ T5881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.820182][ T5986] netlink: 156 bytes leftover after parsing attributes in process `syz.1.48'.
[   60.870631][ T5881] bridge_slave_1: left allmulticast mode
[   60.874433][ T5881] bridge_slave_1: left promiscuous mode
[   60.877080][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.914987][ T5881] bridge_slave_0: left allmulticast mode
[   60.916847][ T5881] bridge_slave_0: left promiscuous mode
[   60.918804][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.149498][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.155950][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.159550][ T5881] bond0 (unregistering): Released all slaves
[   61.281566][ T5881] hsr_slave_0: left promiscuous mode
[   61.292316][ T5881] hsr_slave_1: left promiscuous mode
[   61.294588][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.297060][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.311193][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.315220][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.323856][ T5881] veth1_macvtap: left promiscuous mode
[   61.326360][ T5881] veth0_macvtap: left promiscuous mode
[   61.328417][ T5881] veth1_vlan: left promiscuous mode
[   61.330250][ T5881] veth0_vlan: left promiscuous mode
[   61.495356][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'.
[   61.613678][ T5881] team0 (unregistering): Port device team_slave_1 removed
[   61.632375][ T5881] team0 (unregistering): Port device team_slave_0 removed
[   61.930819][ T6029] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.008289][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'.
[   62.077179][ T5889] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.119910][ T5889] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.142368][ T5889] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.165658][ T5889] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.214511][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.241979][ T5894] Bluetooth: hci0: command tx timeout
[   62.244343][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.256040][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.271647][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.321864][   T55] Bluetooth: hci2: command tx timeout
[   62.323780][ T5894] Bluetooth: hci1: command tx timeout
[   62.417812][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.445152][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   62.469810][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.479654][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.482777][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.510092][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.512770][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.548571][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   62.579851][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.582465][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.605272][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.608423][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.774921][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.798902][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.856213][ T5889] veth0_vlan: entered promiscuous mode
[   62.861510][ T5889] veth1_vlan: entered promiscuous mode
[   62.876974][ T5891] veth0_vlan: entered promiscuous mode
[   62.896113][ T5891] veth1_vlan: entered promiscuous mode
[   62.920669][ T5891] veth0_macvtap: entered promiscuous mode
[   62.930419][ T5891] veth1_macvtap: entered promiscuous mode
[   62.937059][ T5889] veth0_macvtap: entered promiscuous mode
[   62.949423][ T5889] veth1_macvtap: entered promiscuous mode
[   62.972477][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.981066][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.998294][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.010355][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.014365][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.019350][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.023810][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.034910][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.050130][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.053376][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.064857][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.067850][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.123931][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.126549][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.167523][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.170289][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.197968][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.200600][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.232446][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.238832][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.725947][ T6162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.957509][ T6178] syz.1.114 uses obsolete (PF_INET,SOCK_PACKET)
[   64.049033][ T6186] netlink: 96 bytes leftover after parsing attributes in process `syz.1.118'.
[   64.228218][ T6206] delete_channel: no stack
[   64.293111][ T6214] tipc: Can't bind to reserved service type 2
[   64.322567][ T5894] Bluetooth: hci0: command tx timeout
[   64.402070][ T5894] Bluetooth: hci1: command tx timeout
[   64.404734][   T55] Bluetooth: hci2: command tx timeout
[   64.684807][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   65.625374][ T6288] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   65.826420][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'.
[   65.864600][ T6295] bond1: entered promiscuous mode
[   65.867079][ T6295] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.911341][ T6295] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.917635][ T6295] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   65.923771][ T6295] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   65.934181][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'.
[   65.946533][ T6305] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.976243][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'.
[   66.088694][ T6319] bond0: entered promiscuous mode
[   66.090428][ T6319] bond_slave_0: entered promiscuous mode
[   66.094332][ T6319] bond_slave_1: entered promiscuous mode
[   66.098175][ T6319] batadv0: entered promiscuous mode
[   66.100789][ T6319] hsr1: entered allmulticast mode
[   66.102921][ T6319] bond0: entered allmulticast mode
[   66.104631][ T6319] bond_slave_0: entered allmulticast mode
[   66.106857][ T6319] bond_slave_1: entered allmulticast mode
[   66.109294][ T6319] batadv0: entered allmulticast mode
[   66.114084][ T6319] 8021q: adding VLAN 0 to HW filter on device hsr1
[   66.119354][ T6319] bond0: left promiscuous mode
[   66.121521][ T6319] bond_slave_0: left promiscuous mode
[   66.124931][ T6319] bond_slave_1: left promiscuous mode
[   66.128314][ T6319] batadv0: left promiscuous mode
[   66.267890][ T6328] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   66.412104][   T55] Bluetooth: hci0: command tx timeout
[   66.494233][   T55] Bluetooth: hci1: command tx timeout
[   66.496122][ T5864] Bluetooth: hci2: command tx timeout
[   66.798416][ T6350] netlink: 'syz.0.187': attribute type 29 has an invalid length.
[   66.819707][ T6350] netlink: 'syz.0.187': attribute type 29 has an invalid length.
[   67.387036][ T6390] netlink: 52 bytes leftover after parsing attributes in process `syz.0.206'.
[   67.400223][ T6390] netlink: 52 bytes leftover after parsing attributes in process `syz.0.206'.
[   67.412535][ T6390] netlink: 52 bytes leftover after parsing attributes in process `syz.0.206'.
[   67.420713][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'.
[   67.585867][ T6409] netlink: 'syz.1.214': attribute type 10 has an invalid length.
[   67.605497][ T6409] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.214'.
[   67.744808][ T6404] Zero length message leads to an empty skb
[   67.860392][ T6432] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   67.862909][ T6432] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   67.884064][ T6432] hsr_slave_0: left promiscuous mode
[   67.891282][ T6432] hsr_slave_1: left promiscuous mode
[   68.155483][ T6464] netlink: 'syz.2.237': attribute type 2 has an invalid length.
[   68.429487][ T6488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.244'.
[   68.568960][ T5864] Bluetooth: hci2: command 0x0411 tx timeout
[   69.322096][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'.
[   69.418391][ T6604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.426429][ T6602] tipc: Started in network mode
[   69.428817][ T6602] tipc: Node identity 7a374f10059, cluster identity 4711
[   69.431389][ T6602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.440077][ T6602] syzkaller0: entered promiscuous mode
[   69.442585][ T6602] syzkaller0: entered allmulticast mode
[   69.462164][ T6602] tipc: Resetting bearer <eth:syzkaller0>
[   69.466195][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   69.474150][ T6601] tipc: Disabling bearer <eth:syzkaller0>
[   69.606761][ T6618] tipc: Failed to remove unknown binding: 66,1,1/0:3777963026/3777963028
[   69.609668][ T6618] tipc: Failed to remove unknown binding: 66,1,1/0:3777963026/3777963028
[   69.723449][ T5858] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.726615][ T5858] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.730165][ T5858] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.743128][ T5858] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.246530][ T6673] sctp: [Deprecated]: syz.0.306 (pid 6673) Use of int in maxseg socket option.
[   70.246530][ T6673] Use struct sctp_assoc_value instead
[   70.439121][ T6683] Driver unsupported XDP return value 0 on prog  (id 44) dev N/A, expect packet loss!
[   70.542302][ T6688] netlink: 'syz.0.310': attribute type 14 has an invalid length.
[   70.651929][ T5894] Bluetooth: hci2: command 0x0411 tx timeout
[   71.045203][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.047461][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.265687][ T6761] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   71.268167][ T6761] __nla_validate_parse: 4 callbacks suppressed
[   71.268174][ T6761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.344'.
[   71.434247][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'.
[   71.455447][ T6780] netlink: 'syz.0.354': attribute type 2 has an invalid length.
[   71.563861][ T6799] netlink: 'syz.0.363': attribute type 2 has an invalid length.
[   71.566566][ T6799] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   71.641152][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'.
[   71.646189][    C0] vcan0: j1939_session_tx_dat: 0xffff88803bb54400: queue data error: -100
[   71.649054][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   71.651580][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   71.654177][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.656835][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.659521][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.662133][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.664716][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.667221][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.669874][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.672426][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.674989][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.677544][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.680138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.682954][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.685628][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.688283][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.690860][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.693470][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.696061][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.698674][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.701192][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.703872][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.706497][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.709063][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.711598][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.714144][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.716757][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.719316][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.721924][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.724436][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.725272][ T6808] netlink: 'syz.2.367': attribute type 39 has an invalid length.
[   71.726978][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.726987][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.727017][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.737981][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.740697][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.743541][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.746150][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.748665][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.751236][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.753812][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.756413][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.759011][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.761613][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.764338][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.766967][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.769587][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   71.772372][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   71.774949][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   72.605557][ T6820] veth0_to_bridge: entered promiscuous mode
[   72.608759][ T6820] veth0_to_bridge: left promiscuous mode
[   73.390720][ T6854] Bluetooth: MGMT ver 1.23
[   73.426673][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[   73.487855][ T6859] 8021q: VLANs not supported on ipvlan1
[   73.549081][ T6861] netlink: 'syz.2.388': attribute type 2 has an invalid length.
[   74.256643][   T10] cfg80211: failed to load regulatory.db
[   74.436948][ T6904] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   74.741028][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'.
[   75.325190][ T6941] netlink: 'syz.1.419': attribute type 2 has an invalid length.
[   75.328932][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'.
[   75.426047][ T6943] netlink: 'syz.1.420': attribute type 21 has an invalid length.
[   75.454054][ T6943] netlink: 'syz.1.420': attribute type 6 has an invalid length.
[   75.456955][ T6943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.420'.
[   75.461287][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   75.468708][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   75.965215][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'.
[   75.968197][ T6971] netlink: 'syz.2.433': attribute type 18 has an invalid length.
[   76.018938][ T5858] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.043741][ T5858] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.046624][ T5858] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.049573][ T5858] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.229217][ T6994] tipc: Started in network mode
[   76.231468][ T6994] tipc: Node identity 0ea7f16e4997, cluster identity 4711
[   76.237394][ T6994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.247112][ T6994] syzkaller0: entered promiscuous mode
[   76.249499][ T6994] syzkaller0: entered allmulticast mode
[   76.279409][ T6994] tipc: Resetting bearer <eth:syzkaller0>
[   76.285590][ T6993] tipc: Resetting bearer <eth:syzkaller0>
[   76.294529][ T6993] tipc: Disabling bearer <eth:syzkaller0>
[   76.520600][ T7026] __nla_validate_parse: 4 callbacks suppressed
[   76.520613][ T7026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.459'.
[   77.060379][ T7057] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   78.063267][ T7111] pimreg: entered allmulticast mode
[   78.067559][ T7111] pimreg: left allmulticast mode
[   78.103040][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[   78.244438][ T7129] validate_nla: 1 callbacks suppressed
[   78.244449][ T7129] netlink: 'syz.2.506': attribute type 28 has an invalid length.
[   78.280663][ T5881] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   79.037758][ T7144] netlink: 248 bytes leftover after parsing attributes in process `syz.2.513'.
[   79.099821][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   79.183469][ T7162] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.519'.
[   79.261544][ T7168] IPv6: Can't replace route, no match found
[   80.009858][ T7234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.053752][ T7234] syzkaller0: entered promiscuous mode
[   80.056459][ T7234] syzkaller0: entered allmulticast mode
[   80.059608][ T7234] tipc: Resetting bearer <eth:syzkaller0>
[   80.074963][ T7233] tipc: Resetting bearer <eth:syzkaller0>
[   80.901292][ T7233] tipc: Disabling bearer <eth:syzkaller0>
[   81.423498][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.555'.
[   81.487667][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[   81.536724][ T7287] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.562'.
[   81.540646][ T7289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.563'.
[   81.546020][ T7289] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   81.548918][ T7289] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   81.646120][ T7294] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   81.652446][   T95] IPVS: starting estimator thread 0...
[   81.763520][ T7299] IPVS: using max 78 ests per chain, 187200 per kthread
[   81.779200][ T7319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.781978][ T7319] IPv6: NLM_F_CREATE should be set when creating new route
[   81.784866][ T7319] IPv6: NLM_F_CREATE should be set when creating new route
[   81.787682][ T7319] IPv6: NLM_F_CREATE should be set when creating new route
[   81.795260][ T7319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.855721][ T7324] netlink: 48 bytes leftover after parsing attributes in process `syz.0.578'.
[   81.926524][ T7332] sctp: [Deprecated]: syz.0.581 (pid 7332) Use of int in max_burst socket option.
[   81.926524][ T7332] Use struct sctp_assoc_value instead
[   81.984966][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'.
[   81.995892][    T9] IPVS: starting estimator thread 0...
[   82.067028][ T7347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.091907][ T7341] IPVS: using max 78 ests per chain, 187200 per kthread
[   82.557955][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.563319][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.566691][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.570618][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.576969][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.706660][ T7372] chnl_net:caif_netlink_parms(): no params data found
[   82.833270][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.836388][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.839442][ T7372] bridge_slave_0: entered allmulticast mode
[   82.855002][ T7372] bridge_slave_0: entered promiscuous mode
[   82.860090][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.864998][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.868137][ T7372] bridge_slave_1: entered allmulticast mode
[   82.871457][ T7372] bridge_slave_1: entered promiscuous mode
[   82.923585][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.928811][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.951005][ T7372] team0: Port device team_slave_0 added
[   82.996432][ T7372] team0: Port device team_slave_1 added
[   83.036561][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.038935][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.049267][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.056272][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.058551][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.069863][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.126717][ T7372] hsr_slave_0: entered promiscuous mode
[   83.129420][ T7372] hsr_slave_1: entered promiscuous mode
[   83.163895][ T7414] netlink: 'syz.0.619': attribute type 1 has an invalid length.
[   83.201273][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.226864][ T7414] bond1: (slave ip6erspan0): making interface the new active one
[   83.230307][ T7414] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   83.303580][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'.
[   83.419261][ T7372] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.426413][ T7372] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.434149][ T7372] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.447103][ T7372] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.485222][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[   83.563197][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.585543][ T7372] 8021q: adding VLAN 0 to HW filter on device team0
[   83.600248][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.603563][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.615739][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.618237][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.692798][ T7454] netlink: 277 bytes leftover after parsing attributes in process `syz.0.632'.
[   83.787032][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.823355][ T7372] veth0_vlan: entered promiscuous mode
[   83.833965][ T7372] veth1_vlan: entered promiscuous mode
[   83.875855][ T7372] veth0_macvtap: entered promiscuous mode
[   83.886291][ T7372] veth1_macvtap: entered promiscuous mode
[   83.915389][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.934816][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.945262][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.959992][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.967257][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.979623][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.051615][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.057214][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.077976][ T6809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.081006][ T6809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.172923][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'.
[   84.298530][ T7483] syzkaller1: entered promiscuous mode
[   84.300364][ T7483] syzkaller1: entered allmulticast mode
[   84.338914][ T7487] bridge0: entered allmulticast mode
[   84.559351][ T7510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[   84.645666][ T5894] Bluetooth: hci0: command tx timeout
[   84.668998][ T7510] smc: net device bond0 applied user defined pnetid SYZ2
[   84.685325][ T7510] smc: net device bond0 erased user defined pnetid SYZ2
[   84.754884][ T7526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.663'.
[   85.150983][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.154905][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.217370][ T7572] IPv6: sit1: Disabled Multicast RS
[   85.246034][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.250426][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.348274][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.354369][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.419787][ T7581] netlink: 'syz.3.689': attribute type 1 has an invalid length.
[   85.523853][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.527404][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.694207][ T5858] bridge_slave_1: left allmulticast mode
[   85.696327][ T5858] bridge_slave_1: left promiscuous mode
[   85.698293][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.706471][ T5858] bridge_slave_0: left allmulticast mode
[   85.708325][ T5858] bridge_slave_0: left promiscuous mode
[   85.710274][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.001193][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.010711][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.026416][ T5858] bond0 (unregistering): Released all slaves
[   86.148024][ T7633] openvswitch: netlink: IP tunnel dst address not specified
[   86.175164][ T5858] bond1 (unregistering): Released all slaves
[   86.341944][ T5858] tipc: Left network mode
[   86.449121][ T7651] lo speed is unknown, defaulting to 1000
[   86.451397][ T7651] lo speed is unknown, defaulting to 1000
[   86.474123][ T7651] lo speed is unknown, defaulting to 1000
[   86.491617][ T7651] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   86.511013][ T7651] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   86.580255][ T7656] wg1: entered promiscuous mode
[   86.586819][ T7656] wg1: entered allmulticast mode
[   86.628424][ T7651] lo speed is unknown, defaulting to 1000
[   86.643645][ T7651] lo speed is unknown, defaulting to 1000
[   86.664324][ T7651] lo speed is unknown, defaulting to 1000
[   86.674718][ T7651] lo speed is unknown, defaulting to 1000
[   86.721877][ T5894] Bluetooth: hci0: command tx timeout
[   86.724304][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.727486][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.743330][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.749936][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.775201][ T5858] veth1_macvtap: left promiscuous mode
[   86.777240][ T5858] veth0_macvtap: left promiscuous mode
[   86.792170][ T5858] veth1_vlan: left promiscuous mode
[   86.800973][ T5858] veth0_vlan: left promiscuous mode
[   87.004065][ T7695] __nla_validate_parse: 8 callbacks suppressed
[   87.004075][ T7695] netlink: 27 bytes leftover after parsing attributes in process `syz.0.735'.
[   87.060902][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.738'.
[   87.118609][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[   87.179452][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   87.199514][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   87.417266][ T7663] syzkaller1: entered promiscuous mode
[   87.419343][ T7663] syzkaller1: entered allmulticast mode
[   87.800009][ T7721] batadv0: entered promiscuous mode
[   87.816713][ T7718] batadv0: left promiscuous mode
[   87.834753][ T5858] IPVS: stop unused estimator thread 0...
[   87.870716][ T5858] ------------[ cut here ]------------
[   87.873084][ T5858] WARNING: CPU: 0 PID: 5858 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[   87.876312][ T5858] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   87.877866][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   87.883600][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.887376][ T5858] Workqueue: netns cleanup_net
[   87.889322][ T5858] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   87.891207][ T5858] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 98 4f 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 1e eb f7 e8 91 2c a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 2c a7 f7 90 0f 0b 90 e9 60 fe ff ff
[   87.898586][ T5858] RSP: 0018:ffffc900041cf898 EFLAGS: 00010293
[   87.900666][ T5858] RAX: ffffffff8a18841f RBX: ffff88810b86a440 RCX: ffff888109585640
[   87.903559][ T5858] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff888109585640
[   87.906396][ T5858] RBP: ffffc900041cf9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[   87.909445][ T5858] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffffffff8f601a20
[   87.912456][ T5858] R13: 1ffff92000839f40 R14: ffff88810b86b8c0 R15: dffffc0000000000
[   87.915135][ T5858] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[   87.918301][ T5858] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.920537][ T5858] CR2: 00007f01ddce56c0 CR3: 0000000112612000 CR4: 00000000000006f0
[   87.923816][ T5858] Call Trace:
[   87.924978][ T5858]  <TASK>
[   87.926137][ T5858]  xfrm_net_exit+0x2d/0x70
[   87.928635][ T5858]  ops_undo_list+0x49a/0x990
[   87.930348][ T5858]  ? __pfx_ops_undo_list+0x10/0x10
[   87.932447][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   87.934211][ T5858]  cleanup_net+0x4c5/0x800
[   87.935762][ T5858]  ? __pfx_cleanup_net+0x10/0x10
[   87.937469][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.939260][ T5858]  ? process_scheduled_works+0x9ef/0x17b0
[   87.941181][ T5858]  ? process_scheduled_works+0x9ef/0x17b0
[   87.943319][ T5858]  process_scheduled_works+0xae1/0x17b0
[   87.945182][ T5858]  ? __pfx_process_scheduled_works+0x10/0x10
[   87.947338][ T5858]  worker_thread+0x8a0/0xda0
[   87.948922][ T5858]  kthread+0x711/0x8a0
[   87.950278][ T5858]  ? __pfx_worker_thread+0x10/0x10
[   87.952093][ T5858]  ? __pfx_kthread+0x10/0x10
[   87.953646][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.955413][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.957153][ T5858]  ? __pfx_kthread+0x10/0x10
[   87.958720][ T5858]  ret_from_fork+0x3fc/0x770
[   87.960304][ T5858]  ? __pfx_ret_from_fork+0x10/0x10
[   87.962063][ T5858]  ? __switch_to_asm+0x39/0x70
[   87.963644][ T5858]  ? __switch_to_asm+0x33/0x70
[   87.965224][ T5858]  ? __pfx_kthread+0x10/0x10
[   87.966792][ T5858]  ret_from_fork_asm+0x1a/0x30
[   87.968421][ T5858]  </TASK>
[   87.969685][ T5858] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   87.972135][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   87.976355][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.979823][ T5858] Workqueue: netns cleanup_net
[   87.981469][ T5858] Call Trace:
[   87.982695][ T5858]  <TASK>
[   87.983728][ T5858]  dump_stack_lvl+0x99/0x250
[   87.985524][ T5858]  ? __asan_memcpy+0x40/0x70
[   87.987423][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.989237][ T5858]  ? __pfx__printk+0x10/0x10
[   87.990864][ T5858]  panic+0x2db/0x790
[   87.992268][ T5858]  ? __pfx_panic+0x10/0x10
[   87.993862][ T5858]  ? ret_from_fork_asm+0x1a/0x30
[   87.995735][ T5858]  __warn+0x31b/0x4b0
[   87.997509][ T5858]  ? xfrm_state_fini+0x270/0x2f0
[   87.999676][ T5858]  ? xfrm_state_fini+0x270/0x2f0
[   88.001868][ T5858]  report_bug+0x2be/0x4f0
[   88.003794][ T5858]  ? xfrm_state_fini+0x270/0x2f0
[   88.005971][ T5858]  ? xfrm_state_fini+0x270/0x2f0
[   88.008160][ T5858]  ? xfrm_state_fini+0x272/0x2f0
[   88.010332][ T5858]  handle_bug+0x84/0x160
[   88.012300][ T5858]  exc_invalid_op+0x1a/0x50
[   88.014266][ T5858]  asm_exc_invalid_op+0x1a/0x20
[   88.016380][ T5858] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   88.018722][ T5858] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 98 4f 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 1e eb f7 e8 91 2c a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 2c a7 f7 90 0f 0b 90 e9 60 fe ff ff
[   88.026762][ T5858] RSP: 0018:ffffc900041cf898 EFLAGS: 00010293
[   88.029383][ T5858] RAX: ffffffff8a18841f RBX: ffff88810b86a440 RCX: ffff888109585640
[   88.032579][ T5858] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff888109585640
[   88.035895][ T5858] RBP: ffffc900041cf9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[   88.038584][ T5858] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffffffff8f601a20
[   88.042071][ T5858] R13: 1ffff92000839f40 R14: ffff88810b86b8c0 R15: dffffc0000000000
[   88.045501][ T5858]  ? xfrm_state_fini+0x26f/0x2f0
[   88.047563][ T5858]  ? xfrm_state_fini+0x26f/0x2f0
[   88.049652][ T5858]  xfrm_net_exit+0x2d/0x70
[   88.051521][ T5858]  ops_undo_list+0x49a/0x990
[   88.053574][ T5858]  ? __pfx_ops_undo_list+0x10/0x10
[   88.055858][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   88.058050][ T5858]  cleanup_net+0x4c5/0x800
[   88.060029][ T5858]  ? __pfx_cleanup_net+0x10/0x10
[   88.062179][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.064416][ T5858]  ? process_scheduled_works+0x9ef/0x17b0
[   88.066762][ T5858]  ? process_scheduled_works+0x9ef/0x17b0
[   88.069272][ T5858]  process_scheduled_works+0xae1/0x17b0
[   88.071580][ T5858]  ? __pfx_process_scheduled_works+0x10/0x10
[   88.074300][ T5858]  worker_thread+0x8a0/0xda0
[   88.076358][ T5858]  kthread+0x711/0x8a0
[   88.078127][ T5858]  ? __pfx_worker_thread+0x10/0x10
[   88.079851][ T5858]  ? __pfx_kthread+0x10/0x10
[   88.081440][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.083151][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.084910][ T5858]  ? __pfx_kthread+0x10/0x10
[   88.086490][ T5858]  ret_from_fork+0x3fc/0x770
[   88.088078][ T5858]  ? __pfx_ret_from_fork+0x10/0x10
[   88.089709][ T5858]  ? __switch_to_asm+0x39/0x70
[   88.091590][ T5858]  ? __switch_to_asm+0x33/0x70
[   88.093561][ T5858]  ? __pfx_kthread+0x10/0x10
[   88.095508][ T5858]  ret_from_fork_asm+0x1a/0x30
[   88.097488][ T5858]  </TASK>
[   88.099439][ T5858] Kernel Offset: disabled
[   88.101210][ T5858] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:52:56  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33b3460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99d9a770 RSP=ffffc900041cefd0
R8 =ffff888107e50237 R9 =1ffff11020fca046 R10=dffffc0000000000 R11=ffffffff854c1cc0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1d37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f01ddce56c0 CR3=0000000112612000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000001f 0000000030320039
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff0000ff00 XMM09=00000000000000b1 0000000030320039
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000dead4ead RBX=ffffffff99ce08b8 RCX=1ffff9200066df4c RDX=0000000000000000
RSI=ffffffff8db65e93 RDI=ffffffff99ce08b8 RBP=ffffc9000336faf0 RSP=ffffc9000336fa40
R8 =0000000000000000 R9 =ffffffff84cd5aca R10=dffffc0000000000 R11=fffffbfff1f40f5f
R12=dffffc0000000000 R13=ffffc90003c82000 R14=ffffffff99ce08bc R15=dffffc0000000000
RIP=ffffffff819e14c8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555581515500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f23e48e7d60 CR3=00000001095f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f23e3d876c3 00007f23e3d876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000555581529820 00005555815297f0
XMM06=000055558152c954 000055558152c950 XMM07=8010000c014fd600 10000bf0030fffff
XMM08=fffe10000be00300 10000bd003001000 XMM09=6536356266393966 666666666666660a
XMM10=66660a64656e6e69 705f707620622030 XMM11=6220303037356266 3939666666666666
XMM12=756575715f626b73 2062203065373762 XMM13=656b5f5f2e74696e 695f646165685f65
XMM14=3837626639396666 6666666666660a79 XMM15=6c655f765f766461 7461622062203030
