last executing test programs:

1.319964809s ago: executing program 1 (id=186):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100071900010000000000ffdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000004000a0000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000400000000000000000000000000000000000000000000000000000000000000000000000000007d0000000000000000000000000000000000000000000000040000000000000000000000b16b6e00000000000000000084000500ac1414aa000000000000000000000000000004d63300000000000000ff0100000000000000000000000000010000000000000000000000007f000000440000007f000001000000000000000000000000000000003300000000000000fe800000000000000000000000000035000000000500"/244], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB="382881345fd86be2ac2d78c43c91f5a903cf0d4418d0a170d0f6bb2d1909f717cc0f1427a66535896664b785981b9507cc70a9c02e2ede9841e9983feb79c4c05f56a1ab2bb6a6e5f85a7431a66a0186"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x4804)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x4, 0xef77, 0x8, 0x100, 0x80000001, 0x4000010})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800000120008000a00", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r5, 0x22)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000121402002abd7000ffdbdf250800030001000000080003000200000008004f000000000008000300020000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x404)
socket(0x1, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

691.710628ms ago: executing program 2 (id=194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08991100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)

691.260974ms ago: executing program 1 (id=195):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x160, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800000000000000, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x80, "59510fc12456f389c0012be706bf33409c512876892142f62a2d0bf86112e11f22d4eacb"}}]}, 0x160}, 0x1, 0x0, 0x40000}, 0x4000)

691.163398ms ago: executing program 2 (id=196):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c00000010000305000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c00020000003c000e000200000008000f003e0b000005001b000500000008000500", @ANYRES32, @ANYBLOB="08000a00c5dc94b6df5caceeb1d2cf751da42df4e9db7fad0658faef7c06ee2743d6931247a28f96cd2c674ea0ab50a183969f7d3e75bbd9b788e9f7e555559d9b41d1a4e2dfe5588a38d4b48f72b9e059e8d035d6496a375b76345744a1b28db007d606fa076c089f509f8dd0b10c955d08", @ANYRES32, @ANYBLOB], 0x7c}}, 0x0)

688.410288ms ago: executing program 1 (id=197):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0xfffffffa, 0x4) (async)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0xfffffffa, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f00000004c0)={r1, 0x0, 0x20000000}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f00000004c0)={r1, 0x0, 0x20000000}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="020100200f0000002cbd700000000000030006000000000002000020ac1e01010000000000000000020013000100000026bd700000000000030005000000000002004e22ac1414aa00000000000000000100140002000000040002"], 0x78}}, 0x0) (async)
sendmsg$key(r4, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="020100200f0000002cbd700000000000030006000000000002000020ac1e01010000000000000000020013000100000026bd700000000000030005000000000002004e22ac1414aa00000000000000000100140002000000040002"], 0x78}}, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x32, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff780800084002"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff780800084002"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b4062255311a"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'macsec0\x00', <r8=>0x0})
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) (async)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x200, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x11)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES32=r8, @ANYBLOB="08000000000000000a0001000000000008"], 0x2c}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x4e20, @empty}})
socket$alg(0x26, 0x5, 0x0) (async)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32, @ANYBLOB="6c0023800600030057000000060004"], 0x88}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="60200000ec45d6e1a61ee7258b45a290d716d15a86ffc9ee058298b68f7534137021249c54a8d035e532d4000000000000000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf2537000000050019010a0000000800a1008d00000008009f00030000000800a10006000000050018011400000005001801150000000800270000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4004084)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x1)
close(0x4)
socket$nl_generic(0x10, 0x3, 0x10)

687.125966ms ago: executing program 0 (id=198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbba2aaaaaaaabb86dd6d00200000183aff00000000000000000000000000000000ff024e000000000000000000000000014f194e2000189078040000000b0000000000010000000000"], 0x52)

599.084206ms ago: executing program 1 (id=199):
r0 = socket(0x28, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1000}]}}, @CTA_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/389], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

490.597721ms ago: executing program 1 (id=200):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r2=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r2, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x40001)

490.386156ms ago: executing program 2 (id=201):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbba2aaaaaaaabb86dd6d002000001884ff00000000000000000000000000000000ff0200000000000000000007ffffff014f194e2000189078040000000b0000000000010000000000"], 0x52)

399.948433ms ago: executing program 0 (id=202):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x9, 0xb}, {0x9, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x43c0f9ea}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000240)={0x8, 'pim6reg1\x00', {'geneve1\x00'}, 0x7})
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

399.802953ms ago: executing program 2 (id=203):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1900000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2a, 0x200}}]}, 0x148}}, 0x0)

331.44703ms ago: executing program 2 (id=204):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x3f89}, {0x3, 0x6}, {0xd, 0x2}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f00000003c0)=""/243, 0x40, 0xf3, 0x0, 0x9}, 0x28)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x825f, '\x00', 0x0, r3, 0x2, 0x1}, 0x50)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x22}}}]}, 0x58}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'veth0_to_bond\x00', 0xffff})
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000140), &(0x7f0000000040)=""/72}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000380), 0x12)

251.46607ms ago: executing program 2 (id=205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r1=>0x0}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000570000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (rerun: 64)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18)
r3 = socket$caif_stream(0x25, 0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0}) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

200.233644ms ago: executing program 0 (id=206):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x160, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800000000000000, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x80, "59510fc12456f389c0012be706bf33409c512876892142f62a2d0bf86112e11f22d4eacb"}}]}, 0x160}, 0x1, 0x0, 0xc9ffff}, 0x4000)

125.776619ms ago: executing program 0 (id=207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1c, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x1, 0x4, 0xb, 0x3, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5ba}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x75ad8697}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x6a, &(0x7f00000001c0)=""/106, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x5, 0x9, 0x4}, {0x1, 0x2, 0x0, 0xb}, {0x1, 0x5, 0xc, 0xb}, {0x4, 0x1, 0x0, 0x1}, {0x2, 0x3, 0xf, 0x1}, {0x1, 0x4, 0x10, 0xa}], 0x10, 0xfffffffd}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000040)='\x00', r0}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={<r5=>0x0, @broadcast, @remote}, &(0x7f0000000580)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x400c000)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/56, 0x6a}], 0x300)

125.591986ms ago: executing program 1 (id=208):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000100003050000000000ffffe000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c00020000003c000e000200000008000f003e0b000005001b000500000008000500", @ANYRES32, @ANYBLOB="08000a00c5dc94b6df5caceeb1d2cf751da42df4e9db7fad0658faef7c06ee2743d6931247a28f96cd2c674ea0ab50a183969f7d3e75bbd9b788e9f7e555559d9b41d1a4e2dfe5588a38d4b48f72b9e059e8d035d6496a375b76345744a1b28db007d606fa076c089f509f8dd0b10c955d08", @ANYRES32, @ANYBLOB], 0x7c}}, 0x0)

51.453638ms ago: executing program 0 (id=209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890)

0s ago: executing program 0 (id=210):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}]}}]}, 0x44}}, 0x24004001)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59476' (ED25519) to the list of known hosts.
syzkaller login: [   50.692148][ T5819] cgroup: Unknown subsys name 'net'
[   50.815408][ T5819] cgroup: Unknown subsys name 'cpuset'
[   50.820659][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.500186][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.225189][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.228552][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.231198][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.234743][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.237432][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.247280][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.250412][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.255758][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.258339][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.260728][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.295066][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.302487][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.305495][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.308079][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.310427][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.514824][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.525059][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   56.541966][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   56.637498][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.640154][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.642436][ T5827] bridge_slave_0: entered allmulticast mode
[   56.645271][ T5827] bridge_slave_0: entered promiscuous mode
[   56.667252][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.669372][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.671615][ T5827] bridge_slave_1: entered allmulticast mode
[   56.675561][ T5827] bridge_slave_1: entered promiscuous mode
[   56.678192][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.680455][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.682902][ T5831] bridge_slave_0: entered allmulticast mode
[   56.685559][ T5831] bridge_slave_0: entered promiscuous mode
[   56.688705][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.690906][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.693320][ T5831] bridge_slave_1: entered allmulticast mode
[   56.695937][ T5831] bridge_slave_1: entered promiscuous mode
[   56.730536][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.733795][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.735943][ T5838] bridge_slave_0: entered allmulticast mode
[   56.738518][ T5838] bridge_slave_0: entered promiscuous mode
[   56.741553][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.743775][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.746081][ T5838] bridge_slave_1: entered allmulticast mode
[   56.748655][ T5838] bridge_slave_1: entered promiscuous mode
[   56.761831][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.769219][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.782035][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.810156][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.814095][ T5831] team0: Port device team_slave_0 added
[   56.817543][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.837371][ T5831] team0: Port device team_slave_1 added
[   56.840496][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.852484][ T5827] team0: Port device team_slave_0 added
[   56.856534][ T5827] team0: Port device team_slave_1 added
[   56.889016][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.891092][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.898577][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.911556][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.914029][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.921351][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.925990][ T5838] team0: Port device team_slave_0 added
[   56.928789][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.930867][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.938537][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.943032][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.945090][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.952532][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.969773][ T5838] team0: Port device team_slave_1 added
[   56.999536][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.001640][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.009726][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.013847][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.015967][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.024445][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.031241][ T5831] hsr_slave_0: entered promiscuous mode
[   57.033718][ T5831] hsr_slave_1: entered promiscuous mode
[   57.087388][ T5838] hsr_slave_0: entered promiscuous mode
[   57.089576][ T5838] hsr_slave_1: entered promiscuous mode
[   57.091569][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.094274][ T5838] Cannot create hsr debugfs directory
[   57.098740][ T5827] hsr_slave_0: entered promiscuous mode
[   57.100883][ T5827] hsr_slave_1: entered promiscuous mode
[   57.103875][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.106199][ T5827] Cannot create hsr debugfs directory
[   57.309093][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.316173][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.320894][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.331140][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.364751][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.373719][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.376096][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.378656][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.380784][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.385234][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.395877][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.404041][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.441535][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.452043][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.456584][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.461445][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.470428][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.472699][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.474936][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.477079][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.487291][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.490390][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.493531][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.496979][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.535756][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.564207][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   57.578817][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.581034][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.592356][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.598583][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.600740][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.620382][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.626193][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   57.638919][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.647632][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.649754][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.666033][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.668225][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.673490][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.675641][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.679417][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.681568][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.831634][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.863007][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.894867][ T5831] veth0_vlan: entered promiscuous mode
[   57.899914][ T5831] veth1_vlan: entered promiscuous mode
[   57.913432][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.921291][ T5827] veth0_vlan: entered promiscuous mode
[   57.940295][ T5831] veth0_macvtap: entered promiscuous mode
[   57.947969][ T5827] veth1_vlan: entered promiscuous mode
[   57.969720][ T5831] veth1_macvtap: entered promiscuous mode
[   57.974219][ T5838] veth0_vlan: entered promiscuous mode
[   57.980413][ T5827] veth0_macvtap: entered promiscuous mode
[   57.991799][ T5838] veth1_vlan: entered promiscuous mode
[   57.995964][ T5827] veth1_macvtap: entered promiscuous mode
[   58.002778][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.019562][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.026784][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.036542][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.039477][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.046225][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.050748][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.058688][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.062089][ T5838] veth0_macvtap: entered promiscuous mode
[   58.080834][ T5838] veth1_macvtap: entered promiscuous mode
[   58.091387][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.095856][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.099242][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.101975][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.154286][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.163581][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.178473][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.183847][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.197966][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.200820][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.220194][ T4841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.223023][ T4841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.269333][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.271692][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.273125][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.277045][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.283612][ T5220] Bluetooth: hci1: command tx timeout
[   58.285381][ T5220] Bluetooth: hci0: command tx timeout
[   58.298911][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.301344][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.338777][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.341167][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.348449][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.351434][ T4841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.359627][ T4841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.363020][ T5834] Bluetooth: hci2: command tx timeout
[   58.454429][ T5900] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   58.468357][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.485510][ T5900] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.559920][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.562893][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.610523][ T5900] bridge_slave_0: left allmulticast mode
[   58.612344][ T5900] bridge_slave_0: left promiscuous mode
[   58.614723][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.622320][ T5900] bridge_slave_1: left allmulticast mode
[   58.626074][ T5900] bridge_slave_1: left promiscuous mode
[   58.627839][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.631868][ T5913] netlink: 'syz.0.4': attribute type 23 has an invalid length.
[   58.639810][ T5900] bond0: (slave bond_slave_0): Releasing backup interface
[   58.645705][ T5900] bond0: (slave bond_slave_1): Releasing backup interface
[   58.651831][ T5900] team0: Port device team_slave_0 removed
[   58.657337][ T5914] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   58.659766][ T5900] team0: Port device team_slave_1 removed
[   58.663773][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.667411][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.672437][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.678023][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.741037][ T5900] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   58.743584][ T5902] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.767487][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.774683][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.777770][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.780704][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.877636][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'.
[   58.913830][ T5925] bond1: entered promiscuous mode
[   58.916090][ T5925] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.916599][ T5928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11'.
[   58.958512][ T5925] bond1 (unregistering): Released all slaves
[   59.126099][ T5936] openvswitch: netlink: Message has 60 unknown bytes.
[   59.129143][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.149363][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15'.
[   59.276040][ T5900] syz.2.3 (5900) used greatest stack depth: 20632 bytes left
[   59.277816][   T63] cfg80211: failed to load regulatory.db
[   59.376880][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[   59.511626][ T5970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'.
[   60.180959][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26'.
[   60.183755][ T5973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'.
[   60.219595][ T5975] veth2: entered allmulticast mode
[   60.363043][ T5834] Bluetooth: hci0: command tx timeout
[   60.364757][ T5834] Bluetooth: hci1: command tx timeout
[   60.442699][ T5220] Bluetooth: hci2: command tx timeout
[   60.493477][ T6002] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   60.615475][ T6017] syzkaller0: entered promiscuous mode
[   60.617283][ T6017] syzkaller0: entered allmulticast mode
[   60.620349][ T6016] tipc: Started in network mode
[   60.621428][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.621941][ T6016] tipc: Node identity 4a6fd1b77429, cluster identity 4711
[   60.627223][ T6016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.635800][ T6018] tipc: Resetting bearer <eth:syzkaller0>
[   60.647204][ T6017] tipc: Resetting bearer <eth:syzkaller0>
[   60.653616][ T6017] tipc: Disabling bearer <eth:syzkaller0>
[   61.401344][ T6024] C: renamed from team_slave_0
[   61.411876][ T6024] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   61.415186][ T6024] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   61.461031][ T6026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.463987][ T6026] IPv6: NLM_F_CREATE should be set when creating new route
[   61.466780][ T6026] IPv6: NLM_F_CREATE should be set when creating new route
[   61.556365][ T6032] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   61.622036][ T6039] sctp: failed to load transform for md5: -2
[   61.751583][ T6057] bond1: entered promiscuous mode
[   61.754333][ T6057] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.836187][ T6065] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.847136][ T6057] bond1 (unregistering): Released all slaves
[   62.204856][ T6094] bond1: entered promiscuous mode
[   62.207614][ T6094] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.259137][ T6094] bond1 (unregistering): Released all slaves
[   62.455236][ T5220] Bluetooth: hci1: command tx timeout
[   62.457390][ T5220] Bluetooth: hci0: command tx timeout
[   62.487443][ T6112] syzkaller0: entered allmulticast mode
[   62.532067][ T6119] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[   62.536062][ T5834] Bluetooth: hci2: command tx timeout
[   62.582840][ T6122] sctp: [Deprecated]: syz.2.83 (pid 6122) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.582840][ T6122] Use struct sctp_sack_info instead
[   62.850979][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.880460][ T6145] bond1: (slave batadv1): Opening slave failed
[   62.909631][ T6150] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   62.926152][ T6150] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.929855][ T6152] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   62.938446][ T6153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.027249][ T6159] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   63.304999][ T6185] macsec1: entered promiscuous mode
[   63.396583][ T6193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.409940][ T6193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.414436][ T6193] syzkaller0: entered promiscuous mode
[   63.416213][ T6193] syzkaller0: entered allmulticast mode
[   63.426488][ T6193] tipc: Resetting bearer <eth:syzkaller0>
[   63.429579][ T6192] tipc: Resetting bearer <eth:syzkaller0>
[   63.438275][ T6192] tipc: Disabling bearer <eth:syzkaller0>
[   63.609128][ T6203] __nla_validate_parse: 16 callbacks suppressed
[   63.609139][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.114'.
[   63.638300][ T6205] netlink: 830 bytes leftover after parsing attributes in process `syz.1.115'.
[   63.641266][ T6206] netlink: 830 bytes leftover after parsing attributes in process `syz.1.115'.
[   63.648922][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.115'.
[   63.681453][ T6208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.116'.
[   63.721358][ T6210] Zero length message leads to an empty skb
[   63.961112][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'.
[   64.099234][ T6244] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   64.129735][ T6244] bridge_slave_0: left allmulticast mode
[   64.131533][ T6244] bridge_slave_0: left promiscuous mode
[   64.134088][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.138952][ T6244] bridge_slave_1: left allmulticast mode
[   64.140783][ T6244] bridge_slave_1: left promiscuous mode
[   64.142775][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.148240][ T6244] bond0: (slave bond_slave_0): Releasing backup interface
[   64.157191][ T6244] bond0: (slave bond_slave_1): Releasing backup interface
[   64.165375][ T6244] team0: Port device team_slave_0 removed
[   64.173255][ T6244] team0: Port device team_slave_1 removed
[   64.193864][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.202172][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.214628][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.216903][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.231356][ T6252] netlink: 'syz.2.126': attribute type 8 has an invalid length.
[   64.247177][ T6244] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.250147][ T6244] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   64.317839][ T6258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'.
[   64.321327][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'.
[   64.390585][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   64.400799][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'.
[   64.496512][ T6276] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   64.512183][ T6276] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.532953][ T5834] Bluetooth: hci0: command tx timeout
[   64.534643][ T5834] Bluetooth: hci1: command tx timeout
[   64.602682][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   64.936547][ T6244] syz.1.124 (6244) used greatest stack depth: 19800 bytes left
[   64.958558][ T6332] netlink: 'syz.1.152': attribute type 5 has an invalid length.
[   64.967767][ T6332] ip6erspan0: entered promiscuous mode
[   65.848553][ T6380] bond2: entered promiscuous mode
[   65.850380][ T6380] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.900498][ T6380] bond2 (unregistering): Released all slaves
[   66.156698][ T6411] batadv_slave_0: entered promiscuous mode
[   66.167748][ T6411] batadv_slave_0 (unregistering): left promiscuous mode
[   66.213461][ T6412] Bluetooth: MGMT ver 1.23
[   66.682744][ T5220] Bluetooth: hci2: command 0x0419 tx timeout
[   67.078052][ T6440] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   67.102978][ T6440] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.129646][ T6440] bond2: (slave bridge1): making interface the new active one
[   67.132929][ T6440] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   67.186554][ T6443] bond2: entered promiscuous mode
[   67.189711][ T6443] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.251701][ T6443] bond2 (unregistering): Released all slaves
[   67.398127][ T6450] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   67.756950][ T6472] bond2: entered promiscuous mode
[   67.774790][ T6472] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.785364][ T6480] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   67.826942][ T6472] bond2 (unregistering): Released all slaves
[   67.856528][ T6480] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.035867][ T6491] tipc: Started in network mode
[   68.041178][ T6491] tipc: Node identity da48e0cfb124, cluster identity 4711
[   68.056699][ T6491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.060035][ T6491] syzkaller0: entered promiscuous mode
[   68.063506][ T6491] syzkaller0: entered allmulticast mode
[   68.077670][ T6491] tipc: Resetting bearer <eth:syzkaller0>
[   68.086794][ T6490] tipc: Resetting bearer <eth:syzkaller0>
[   68.095478][ T6490] tipc: Disabling bearer <eth:syzkaller0>
[   68.374909][ T6522] bond4: entered promiscuous mode
[   68.379937][ T6522] 8021q: adding VLAN 0 to HW filter on device bond4
[   68.477843][ T6522] bond4 (unregistering): Released all slaves
Connection to localhost closed by remote host.
[   69.473575][ T5919] bond0 (unregistering): Released all slaves
[   69.521227][ T5919] bond1 (unregistering): Released all slaves
[   69.715779][ T5919] hsr_slave_0: left promiscuous mode
[   69.717838][ T5919] hsr_slave_1: left promiscuous mode
[   70.328324][ T5919] ------------[ cut here ]------------
[   70.330468][ T5919] WARNING: CPU: 0 PID: 5919 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[   70.334392][ T5919] Modules linked in:
[   70.336148][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   70.342103][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.346056][ T5919] Workqueue: netns cleanup_net
[   70.347889][ T5919] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   70.350062][ T5919] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 48 5e 0c f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 2c ed f7 e8 91 4e aa f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 4e aa f7 90 0f 0b 90 e9 60 fe ff ff
[   70.357545][ T5919] RSP: 0018:ffffc90004b5f898 EFLAGS: 00010293
[   70.359935][ T5919] RAX: ffffffff8a15d99f RBX: ffff8881086c2440 RCX: ffff888023f39cc0
[   70.363345][ T5919] RDX: 0000000000000000 RSI: ffffffff8db87667 RDI: ffff888023f39cc0
[   70.365940][ T5919] RBP: ffffc90004b5f9b0 R08: ffffffff8fa1f6f7 R09: 1ffffffff1f43ede
[   70.368457][ T5919] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: ffffffff8f6182e0
[   70.371176][ T5919] R13: 1ffff9200096bf40 R14: ffff8881086c38c0 R15: dffffc0000000000
[   70.374136][ T5919] FS:  0000000000000000(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
[   70.376905][ T5919] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.378958][ T5919] CR2: 00007ffc887d4a59 CR3: 0000000107da0000 CR4: 00000000000006f0
[   70.381435][ T5919] Call Trace:
[   70.382494][ T5919]  <TASK>
[   70.383523][ T5919]  xfrm_net_exit+0x2d/0x70
[   70.384963][ T5919]  ops_undo_list+0x49a/0x990
[   70.386433][ T5919]  ? __pfx_ops_undo_list+0x10/0x10
[   70.388058][ T5919]  ? do_raw_spin_unlock+0x4d/0x240
[   70.389685][ T5919]  cleanup_net+0x4c5/0x800
[   70.391088][ T5919]  ? __pfx_cleanup_net+0x10/0x10
[   70.392730][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[   70.394361][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[   70.396133][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[   70.397906][ T5919]  process_scheduled_works+0xae1/0x17b0
[   70.399648][ T5919]  ? __pfx_process_scheduled_works+0x10/0x10
[   70.401519][ T5919]  worker_thread+0x8a0/0xda0
[   70.403003][ T5919]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.404908][ T5919]  ? __kthread_parkme+0x7b/0x200
[   70.406410][ T5919]  kthread+0x711/0x8a0
[   70.407712][ T5919]  ? __pfx_worker_thread+0x10/0x10
[   70.409310][ T5919]  ? __pfx_kthread+0x10/0x10
[   70.410724][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[   70.412335][ T5919]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.414051][ T5919]  ? __pfx_kthread+0x10/0x10
[   70.415501][ T5919]  ret_from_fork+0x3fc/0x770
[   70.416950][ T5919]  ? __pfx_ret_from_fork+0x10/0x10
[   70.418533][ T5919]  ? __switch_to_asm+0x39/0x70
[   70.420024][ T5919]  ? __switch_to_asm+0x33/0x70
[   70.421449][ T5919]  ? __pfx_kthread+0x10/0x10
[   70.422935][ T5919]  ret_from_fork_asm+0x1a/0x30
[   70.424428][ T5919]  </TASK>
[   70.425399][ T5919] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   70.427686][ T5919] CPU: 0 UID: 0 PID: 5919 Comm: kworker/u8:5 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   70.431545][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.434720][ T5919] Workqueue: netns cleanup_net
[   70.436210][ T5919] Call Trace:
[   70.437255][ T5919]  <TASK>
[   70.438183][ T5919]  dump_stack_lvl+0x99/0x250
[   70.439632][ T5919]  ? __asan_memcpy+0x40/0x70
[   70.441064][ T5919]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.442698][ T5919]  ? __pfx__printk+0x10/0x10
[   70.444142][ T5919]  panic+0x2db/0x790
[   70.445378][ T5919]  ? __pfx_panic+0x10/0x10
[   70.446760][ T5919]  ? ret_from_fork_asm+0x1a/0x30
[   70.448261][ T5919]  __warn+0x31b/0x4b0
[   70.449467][ T5919]  ? xfrm_state_fini+0x270/0x2f0
[   70.450956][ T5919]  ? xfrm_state_fini+0x270/0x2f0
[   70.452457][ T5919]  report_bug+0x2be/0x4f0
[   70.453755][ T5919]  ? xfrm_state_fini+0x270/0x2f0
[   70.455227][ T5919]  ? xfrm_state_fini+0x270/0x2f0
[   70.456723][ T5919]  ? xfrm_state_fini+0x272/0x2f0
[   70.458254][ T5919]  handle_bug+0x84/0x160
[   70.459571][ T5919]  exc_invalid_op+0x1a/0x50
[   70.460974][ T5919]  asm_exc_invalid_op+0x1a/0x20
[   70.462450][ T5919] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   70.464160][ T5919] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 48 5e 0c f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 2c ed f7 e8 91 4e aa f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 4e aa f7 90 0f 0b 90 e9 60 fe ff ff
[   70.470034][ T5919] RSP: 0018:ffffc90004b5f898 EFLAGS: 00010293
[   70.471903][ T5919] RAX: ffffffff8a15d99f RBX: ffff8881086c2440 RCX: ffff888023f39cc0
[   70.474335][ T5919] RDX: 0000000000000000 RSI: ffffffff8db87667 RDI: ffff888023f39cc0
[   70.476697][ T5919] RBP: ffffc90004b5f9b0 R08: ffffffff8fa1f6f7 R09: 1ffffffff1f43ede
[   70.479117][ T5919] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: ffffffff8f6182e0
[   70.481566][ T5919] R13: 1ffff9200096bf40 R14: ffff8881086c38c0 R15: dffffc0000000000
[   70.484018][ T5919]  ? xfrm_state_fini+0x26f/0x2f0
[   70.485535][ T5919]  ? xfrm_state_fini+0x26f/0x2f0
[   70.487070][ T5919]  xfrm_net_exit+0x2d/0x70
[   70.488446][ T5919]  ops_undo_list+0x49a/0x990
[   70.489878][ T5919]  ? __pfx_ops_undo_list+0x10/0x10
[   70.491447][ T5919]  ? do_raw_spin_unlock+0x4d/0x240
[   70.493072][ T5919]  cleanup_net+0x4c5/0x800
[   70.494477][ T5919]  ? __pfx_cleanup_net+0x10/0x10
[   70.496022][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[   70.497617][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[   70.499352][ T5919]  ? process_scheduled_works+0x9ef/0x17b0
[   70.501104][ T5919]  process_scheduled_works+0xae1/0x17b0
[   70.502787][ T5919]  ? __pfx_process_scheduled_works+0x10/0x10
[   70.504649][ T5919]  worker_thread+0x8a0/0xda0
[   70.506094][ T5919]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.508019][ T5919]  ? __kthread_parkme+0x7b/0x200
[   70.509460][ T5919]  kthread+0x711/0x8a0
[   70.510693][ T5919]  ? __pfx_worker_thread+0x10/0x10
[   70.512227][ T5919]  ? __pfx_kthread+0x10/0x10
[   70.513675][ T5919]  ? _raw_spin_unlock_irq+0x23/0x50
[   70.515295][ T5919]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.516902][ T5919]  ? __pfx_kthread+0x10/0x10
[   70.518325][ T5919]  ret_from_fork+0x3fc/0x770
[   70.519691][ T5919]  ? __pfx_ret_from_fork+0x10/0x10
[   70.521233][ T5919]  ? __switch_to_asm+0x39/0x70
[   70.522725][ T5919]  ? __switch_to_asm+0x33/0x70
[   70.524280][ T5919]  ? __pfx_kthread+0x10/0x10
[   70.525752][ T5919]  ret_from_fork_asm+0x1a/0x30
[   70.527236][ T5919]  </TASK>
[   70.528741][ T5919] Kernel Offset: disabled
[   70.530017][ T5919] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:29:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004b5f030
R8 =ffff888021618237 R9 =1ffff110042c3046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af189f R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc887d4a59 CR3=0000000107da0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=4c4c3ae72d559500 RBX=ffffffff81976a18 RCX=4c4c3ae72d559500 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe277face9 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2caf411d4f
XMM06=0000000000000000 00007f2caf411d49 XMM07=0000000000000000 00007f2caf411d5d
XMM08=0000000000000000 00007f2caf411de3 XMM09=0000000000000000 00007f2caf411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
